last executing test programs: 2m21.58797881s ago: executing program 4 (id=460): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$inet6(r0, 0x0, 0x4048043) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x38, 0x24, 0xd0f, 0x4703d2d, 0xfffffffd, {0x60, 0x0, 0x0, r3, {0x0, 0xfff2}, {0xfff1, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x24000040}, 0x44080) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x4000) 2m21.504097411s ago: executing program 4 (id=464): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000c"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x0, 0x0, @local, 0x9}}, 0x0, 0x0, 0x1c, 0x0, "0af5a212a1bd3bbda613efd9c8b4965dca66db42f66a86e5781cf86717055a7c1d1408407e5a774ef95f2fc1b947e00f000000123f2f1d34b0882e83d41b67cb9ff147c6d33a097d2269351b3ed300"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f00000012c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x34, 0x0, "0c9e089c1b4a04000bde79f04103c458187eb46c2d996aff287154e786455261c425a7519cc275d04e6205abd307a0c4fa3838bf399ad5bd35f21907c7988d1300"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}}}, 0x0, 0x0, 0x11, 0x0, "a1c1dd75a68473ba07d945c3b03e10950cd4b347113e55eb4285bf274bca67efbff2fdf98328de9434031348589bf28046d14810000000e3ffffff00"}, 0xd8) close_range(r2, 0xffffffffffffffff, 0x0) 2m21.414060652s ago: executing program 4 (id=466): accept$inet(0xffffffffffffffff, 0x0, &(0x7f0000000540)) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x9}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000600), 0xc, 0x0, 0x1, 0x0, 0x0, 0x48010}, 0x4000000) r0 = socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='gre0\x00', 0x10) sendmmsg$inet(r0, &(0x7f0000000240)=[{{&(0x7f0000000080)={0x2, 0x4e23, @loopback}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000780)="5825be06000000000000007ca2746314d1", 0x11}, {&(0x7f0000000300)="010f208434bca5a9473166c6c68f4a", 0xf}], 0x2}}], 0x1, 0x4004040) 2m21.386853552s ago: executing program 4 (id=468): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8002, &(0x7f00000000c0), 0x1, 0x4b4, &(0x7f0000000c80)="$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") open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) r0 = syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0x0, 0x3010, 0x0, 0x290}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r3, 0x8004587d, &(0x7f0000000080)={@desc={0x1, 0x0, @desc2}}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r0, 0x47ba, 0x3e80, 0x0, 0x0, 0x0) 2m21.206668353s ago: executing program 4 (id=471): timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0xfffff000) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x11c0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file4\x00', 0x1, 0x20) openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file4\x00', &(0x7f00000000c0)={0x8a001, 0x0, 0x20}, 0x18) 2m21.125189224s ago: executing program 4 (id=474): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000080)='9p_client_res\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000080)='9p_client_res\x00', r2}, 0x10) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) 2m21.124903664s ago: executing program 32 (id=474): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000080)='9p_client_res\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000080)='9p_client_res\x00', r2}, 0x10) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) 13.370292104s ago: executing program 1 (id=3204): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f00000000c0)='.\x00', 0xa4000061) read(r0, &(0x7f0000000140)=""/68, 0x44) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r1}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) 13.326218293s ago: executing program 1 (id=3205): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={0x0, 0xffffffffffffffff, 0x0, 0xa}, 0x18) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/sync_on_suspend', 0x100102, 0x50) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="080086dd0001110004600000a60c6eec00be00442cfffe8000000000000000000000000000aaff020000000000000000000000000001", @ANYRES64=r1], 0xfdef) 13.218052974s ago: executing program 1 (id=3206): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f00000007c0)='skb_copy_datagram_iovec\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f0000000280)='skb_copy_datagram_iovec\x00', r2}, 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r3, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdc8}, 0x0) 13.145328355s ago: executing program 1 (id=3219): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000012c0), 0xfe, 0x249, &(0x7f0000000800)="$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") open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mount(&(0x7f00000004c0)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) lstat(&(0x7f0000000180)='./file1\x00', 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1c0000000, 0x8005, 0x0, 0x0, 0x15, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x200]}) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x90) getdents64(r1, 0x0, 0x0) 12.625557788s ago: executing program 1 (id=3236): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000800), &(0x7f0000000840)=r1}, 0x20) mount(0x0, 0x0, 0x0, 0x5, 0x0) syz_open_dev$evdev(0x0, 0x3, 0x40) setrlimit(0xf, 0x0) 12.3774376s ago: executing program 1 (id=3232): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r0, {0x0, 0xd}, {0xb, 0xb}, {0xa, 0xc}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x2001c061}, 0x4008000) syz_mount_image$iso9660(&(0x7f0000000cc0), &(0x7f0000000180)='./file3\x00', 0x1004081, &(0x7f0000000500)=ANY=[@ANYRES16=0x0, @ANYRES32], 0x10, 0x7f4, &(0x7f0000000d80)="$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") ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) 12.33979367s ago: executing program 33 (id=3232): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r0, {0x0, 0xd}, {0xb, 0xb}, {0xa, 0xc}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x2001c061}, 0x4008000) syz_mount_image$iso9660(&(0x7f0000000cc0), &(0x7f0000000180)='./file3\x00', 0x1004081, &(0x7f0000000500)=ANY=[@ANYRES16=0x0, @ANYRES32], 0x10, 0x7f4, &(0x7f0000000d80)="$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") ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) 2.713524313s ago: executing program 2 (id=3455): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000000), &(0x7f0000000280)='%-010d \x00'}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r1}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x4008032, 0xffffffffffffffff, 0xd06d000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) 2.379024125s ago: executing program 3 (id=3457): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48) syz_read_part_table(0x1059, &(0x7f0000000000)="$eJzsz8FNw0AUBNDxYmRbogNa4Ewn7scHCuFMT0hUwDmX6EdeR0oHSQ7v3Uazs9IPD/WRlpxqfG+ZkyXJuWpK8nb0VdVakr+ehtuwP+q2ek3ycoRx2f/JsF3LVv+fa9/VsC++l6/5aH4zZf25150AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8MwuAQAA//9ZkRMF") bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0xff38}, 0x90) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a6c52d922ba2a05dd42"], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) accept4$llc(0xffffffffffffffff, 0x0, 0x0, 0x800) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) 2.244412426s ago: executing program 2 (id=3458): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = socket$unix(0x1, 0x2, 0x0) r2 = syz_io_uring_setup(0x66e, &(0x7f0000000240)={0x0, 0x0, 0x10100, 0x3, 0x8d}, &(0x7f0000000380)=0x0, &(0x7f0000000200)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r1, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)=""/6, 0x6}], 0x1, 0x0, 0x1}) io_uring_enter(r2, 0x567, 0x0, 0x0, 0x0, 0x0) connect$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r1, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) close(r0) 2.162526986s ago: executing program 2 (id=3459): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x18) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x17) 2.127631956s ago: executing program 6 (id=3460): sync() sync() getrusage(0xffffffffffffffff, 0x0) sync() sync() sync() sync() sync() getrusage(0x0, &(0x7f0000000400)) 1.960595427s ago: executing program 6 (id=3463): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000300)='sched_switch\x00', r1, 0x0, 0x80000000000000}, 0x18) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000002, 0x6031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ceb000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r2, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) 1.940384447s ago: executing program 3 (id=3465): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x18) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x91) newfstatat(0xffffffffffffff9c, &(0x7f00000006c0)='./file1\x00', &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) setreuid(r1, r1) setrlimit(0x40000000000008, &(0x7f0000000000)) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r2, 0x1, 0x3c, &(0x7f00000001c0)={0x200000000000001}, 0x8) sendto$inet6(r2, 0x0, 0x0, 0x404c844, &(0x7f0000000540)={0xa, 0x4e24, 0x9, @local}, 0x1c) 1.874156428s ago: executing program 3 (id=3466): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$nl_audit(0x10, 0x3, 0x9) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r2}, 0x10) syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x0, 0x2, 0x4}, 0x0, 0x0) 1.50415448s ago: executing program 6 (id=3467): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000180000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000f0850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x18) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'ipvlan0\x00', 0x0}) sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000fedbdf25080000001800028014000380100001800400030008000100050000000c00018008000100", @ANYRES64=r3], 0x38}, 0x1, 0x0, 0x0, 0x40801}, 0x14) 1.503992331s ago: executing program 5 (id=3468): unshare(0x20060400) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000001c0), 0x1, 0x553, &(0x7f0000001080)="$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") r0 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) ftruncate(r0, 0x2007ffc) sendfile(r0, r0, 0x0, 0x800000009) 1.458949891s ago: executing program 6 (id=3470): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = socket$unix(0x1, 0x2, 0x0) r2 = syz_io_uring_setup(0x66e, &(0x7f0000000240)={0x0, 0x0, 0x10100, 0x3, 0x8d}, &(0x7f0000000380)=0x0, &(0x7f0000000200)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r1, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)=""/6, 0x6}], 0x1, 0x0, 0x1}) io_uring_enter(r2, 0x567, 0x0, 0x0, 0x0, 0x0) connect$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r1, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) close(r0) 1.359482372s ago: executing program 6 (id=3472): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0xe7fd}, 0x100002, 0x3, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000012c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000580)="d8000000200081044e81f782db44b90402000000e8fe55a11800150006001c0000000e120900100000000401a80016000a0011400600000003080000004dcf5c0468c1d67f6f94007134cf6ee08088568ab35d6e7016bb234841ef52b49816277ce06bbace806069438e6fb599e0ced72a6ba86cf917cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b10d414f00004d9db22fe7c9f8775730d16a4683f1aea4edbb57a5025ccca9e00360db70100000040fad95667e006d8df969b3ef35ce34d4a13821f4fbb9ad809d561cdce81ed0bffece0b42a9e", 0xd8}], 0x1}, 0x0) 1.287196072s ago: executing program 0 (id=3474): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000080)=0x454a, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x25c, &(0x7f0000000440)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002064070000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r1}, 0x10) r2 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r2, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) 1.262119342s ago: executing program 6 (id=3475): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$kcm(0x10, 0x2, 0x0) futex(0x0, 0xd, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0xd, 0x0, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) sendmsg$kcm(r0, 0x0, 0x400c0) socket$inet6(0xa, 0x3, 0x5) syz_read_part_table(0x59d, &(0x7f0000000000)="$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") 1.216184872s ago: executing program 5 (id=3476): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r0}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f0000000940)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000002000000e00000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000064010102000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x310) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r3, 0xffffffffffffffff, 0x100000000000000) 1.195967232s ago: executing program 0 (id=3477): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e25, 0x400, @mcast1, 0x9}, 0x1c) connect$pppl2tp(r2, &(0x7f0000000380)=@pppol2tp={0x18, 0x1, {0x0, r3, {0x2, 0xe, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x4002, 0x0, 0x5}}, 0x26) writev(r2, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x180204}], 0x1) 1.177072042s ago: executing program 2 (id=3479): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x8000f28, 0x0) splice(r2, 0x0, r1, 0x0, 0x7f, 0xe) write(r0, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000002, 0x4012831, 0xffffffffffffffff, 0xffffe000) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='map_files\x00') getdents(r4, &(0x7f0000002380)=""/130, 0x82) 1.176892122s ago: executing program 5 (id=3480): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r1}, &(0x7f0000000200), &(0x7f0000000080)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000740)='kfree\x00', r2, 0x0, 0x40008003}, 0x18) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @rand_addr=' \x01\x00', 0xfffffffd}, 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f00000002c0)={0x0, 0x1, 0x4}, 0x8) 1.121406783s ago: executing program 0 (id=3481): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001240)={0x18, 0x4, &(0x7f0000000980)=ANY=[@ANYBLOB="1801000000000000000000006dfeff00850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='sysfs\x00', 0x800000, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) chroot(&(0x7f0000000100)='./file0\x00') pivot_root(&(0x7f0000000240)='./file0/../file0\x00', &(0x7f0000000000)='./file0/../file0\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kfree\x00', r0, 0x0, 0x401}, 0x11) openat(0xffffffffffffff9c, 0x0, 0xe02, 0x1c0) syz_open_dev$tty1(0xc, 0x4, 0x1) 1.058296473s ago: executing program 0 (id=3482): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x41, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000200)={{r0}, &(0x7f0000000140), &(0x7f0000000040)='%pI4 \x00'}, 0x2a) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = socket$xdp(0x2c, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x400000000000004) setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f00000004c0)=0x1000000, 0x4) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000000000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1) 580.447396ms ago: executing program 0 (id=3483): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000300)='sched_switch\x00', r1, 0x0, 0x80000000000000}, 0x18) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000002, 0x6031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ceb000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r2, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) 580.284356ms ago: executing program 3 (id=3484): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00', r0}, 0x10) r1 = socket(0x2a, 0x2, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}}, 0x24}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000980)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {}, {0x8}}, [@filter_kind_options=@f_u32={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4080}, 0x4000) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 410.264737ms ago: executing program 2 (id=3485): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) creat(&(0x7f0000000300)='./file0\x00', 0xa14089a55daf2ce7) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x88) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f0000000200)='./file1/file4/file5\x00', 0x81c0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000600)='./file1/file4/file5\x00', 0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) 409.710097ms ago: executing program 3 (id=3495): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) write$P9_RVERSION(r2, &(0x7f0000000c40)=ANY=[], 0x13) r4 = getpid() bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r3, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)=[0x5], 0x0, 0x0, 0x1, 0x0, r4}}, 0x40) close_range(r1, 0xffffffffffffffff, 0x0) 349.926458ms ago: executing program 2 (id=3486): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48) syz_read_part_table(0x1059, &(0x7f0000000000)="$eJzsz8FNw0AUBNDxYmRbogNa4Ewn7scHCuFMT0hUwDmX6EdeR0oHSQ7v3Uazs9IPD/WRlpxqfG+ZkyXJuWpK8nb0VdVakr+ehtuwP+q2ek3ycoRx2f/JsF3LVv+fa9/VsC++l6/5aH4zZf25150AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8MwuAQAA//9ZkRMF") bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0xff38}, 0x90) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a6c52d922ba2a05dd42"], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) accept4$llc(0xffffffffffffffff, 0x0, 0x0, 0x800) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) 298.100648ms ago: executing program 5 (id=3487): socket$inet6_mptcp(0xa, 0x1, 0x106) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = syz_io_uring_setup(0xd38, &(0x7f0000000280)={0x0, 0x7732, 0x80, 0x801, 0x350}, &(0x7f0000000100)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2e, 0x0, 0x0, 0x5}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_WRITE={0x17, 0x1, 0x2007, @fd, 0xffffffffffffff7f, 0x0, 0x0, 0x4, 0x1}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) 153.170689ms ago: executing program 0 (id=3488): syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f00000001c0), 0x1, 0x5d8, &(0x7f0000000c00)="$eJzs3c9vFFUcAPDvbH/QUrSFGBUP0sQYSJSWFjDEeICrIQ3+iBcvVloQKdDQGi2aUBK8mBgvxph48iD+F0rkyklPHrx4MiREDUcT18x2pnTb2ZYubacyn0+y9M17O7w33X773r6+NxtAZQ2m/9Qi9kbEdBLRn8wvlnVGVji48Lx7f39yOn0kUa+/8WcSSZaXPz/JvvZlJ/dExM8/JbGnY2W9M3NXzo9PTU1ezo6HZy9MD8/MXTl47sL42cmzkxdHXxo9dvTI0WMjh9q6rqsFeSevv/9h/2djb3/3zT/JyPe/jSVxPF7Nnrj0OjbKYAw2vifJyqK+YxtdWUk6sp+TpS9x0llig1iX/PXrioinoj864v6L1x+fvlZq44BNVU8i6kBFJeIfKiofB+Tv7Ze/D66VMioBtsLdEwsTACvjv3NhbjB6GnMDO+8lsXRaJ4mI9mbmmu2KiNu3xq6fuTV2PTZpHg4oNn8tIp4uiv+kEf8D0RMDjfivNcV/Oi44lX1N819vs/7lU8XiH7bOQvz3rBr/0SL+31kS/++2Wf/g/eR7vU3x39vuJQEAAAAAAEBl3TwRES8W/f2/trj+JwrW//RFxPENqH9w2fHKv//X7mxANUCBuyciXilc/1vLV/8OdGSpxxrrAbqSM+emJg9FxOMRcSC6dqTHI6vUcfDzPV+3KhvM1v/lj7T+29lawKwddzp3NJ8zMT47/rDXDUTcvRbxTOH632Sx/08K+v/098H0A9ax5/kbp1qVrR3/wGapfxuxv7D/v3/XimT1+3MMN8YDw/moYKVnP/7ih1b1txv/bjEBDy/t/3euHv8DydL79cysv47Dc531VmXtjv+7kzcbt5zpzvI+Gp+dvTwS0Z2c7Ehzm/JH199meBTl8ZDHSxr/B55bff6vaPzfGxHzy/7v5K/mPcW5J//t+71Ve4z/oTxp/E+sq/9ff2L0xsCPrep/sP7/SKOvP5DlmP+DBV/lYdrdnF8Qjp1FRVvdXgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4FNQiYlcktaHFdK02NBTRFxFPxM7a1KWZ2RfOXPrg4kRa1vj8/1r+Sb/9C8dJ/vn/A0uOR5cdH46I3RHxZUdv43jo9KWpibIvHgAAAAAAAAAAAAAAAAAAALaJvhb7/1N/dJTdOmDTdZbdAKA0BfH/SxntALae/h+qS/xDdYl/qC7xD9Ul/qG6xD9Ul/iH6hL/AAAAAADwSNm97+avSUTMv9zbeKS6s7KuUlsGbLZa2Q0ASuMWP1Bdlv5AdXmPDyRrlPe0PGmtM1czffohTgYAAAAAAAAAAACAytm/1/5/qCr7/6G67P+H6sr3/+8ruR3A1vMeH4g1dvIX7v9f8ywAAAAAAAAAAAAAYCPNzF05Pz41NXlZ4q3t0YytTNTr9avpT8F2ac//PJEvhd8u7VmWyPf6PdhZ5f1OAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmv0XAAD//xYSJMU=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) removexattr(0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2, 0x0, 0x7}, 0x18) 153.040029ms ago: executing program 3 (id=3489): unshare(0x20060400) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000001c0), 0x1, 0x553, &(0x7f0000001080)="$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") r0 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) ftruncate(r0, 0x2007ffc) sendfile(r0, r0, 0x0, 0x800000009) 152.833309ms ago: executing program 5 (id=3490): bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000001000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000ec0)={&(0x7f0000000bc0)='kfree\x00', r1, 0x0, 0xfffffffffffffff4}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000008000000000000005000100070000000900020073797a30000000001400078008001240000000000500150004000000050005000000000005000400000000000d000300686173683a6d6163"], 0x5c}}, 0x0) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000740)=ANY=[@ANYBLOB="44000000090605000000000000000000010000050900020073797a30000006000500010007000000080009400000000114000880100007800a001100"], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB="28000000030605000000000000000000000000000500010007"], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x20000010) 0s ago: executing program 5 (id=3491): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x18) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x17) kernel console output (not intermixed with test programs): -8c75-0525a5b65a09. [ 118.966618][ T8268] netlink: 23 bytes leftover after parsing attributes in process `syz.1.1747'. [ 119.016504][ T8272] veth1_to_bond: entered allmulticast mode [ 119.037063][ T8272] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1749'. [ 119.060617][ T8272] $Hÿ: (slave bond_slave_1): Releasing backup interface [ 119.070008][ T8272] bond_slave_1 (unregistering): left promiscuous mode [ 119.087535][ T8272] veth1_to_bond (unregistering): left allmulticast mode [ 119.420655][ T8297] netlink: 'syz.3.1760': attribute type 39 has an invalid length. [ 119.454087][ T8299] tipc: Disabling bearer [ 119.626297][ T8306] syzkaller0: entered allmulticast mode [ 119.635031][ T8306] syzkaller0: entered promiscuous mode [ 119.645303][ T8306] syzkaller0 (unregistering): left allmulticast mode [ 119.652277][ T8306] syzkaller0 (unregistering): left promiscuous mode [ 119.756196][ T8315] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1767'. [ 119.885990][ T8321] can0: slcan on ttyS3. [ 119.900114][ T3975] Bluetooth: hci0: command 0x1003 tx timeout [ 119.906162][ T3529] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 119.960449][ T8321] can0 (unregistered): slcan off ttyS3. [ 120.073160][ T8329] wireguard0: entered promiscuous mode [ 120.078751][ T8329] wireguard0: entered allmulticast mode [ 120.240807][ T8344] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1781'. [ 120.263819][ T29] kauditd_printk_skb: 96 callbacks suppressed [ 120.263837][ T29] audit: type=1400 audit(1761932539.570:12685): avc: denied { add_name } for pid=8345 comm="GPL" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 120.294122][ T29] audit: type=1400 audit(1761932539.570:12686): avc: denied { associate } for pid=8345 comm="GPL" name="file1" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 120.449003][ T8359] loop2: detected capacity change from 0 to 512 [ 120.455889][ T8359] EXT4-fs: Ignoring removed i_version option [ 120.462061][ T8359] EXT4-fs: Ignoring removed bh option [ 120.468568][ T29] audit: type=1326 audit(1761932539.760:12687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8347 comm="syz.0.1783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39b034efc9 code=0x7ffc0000 [ 120.492404][ T29] audit: type=1326 audit(1761932539.760:12688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8347 comm="syz.0.1783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39b034efc9 code=0x7ffc0000 [ 120.515992][ T29] audit: type=1326 audit(1761932539.760:12689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8347 comm="syz.0.1783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=149 compat=0 ip=0x7f39b034efc9 code=0x7ffc0000 [ 120.550175][ T29] audit: type=1326 audit(1761932539.850:12690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8347 comm="syz.0.1783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39b034efc9 code=0x7ffc0000 [ 120.573816][ T29] audit: type=1326 audit(1761932539.850:12691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8347 comm="syz.0.1783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39b034efc9 code=0x7ffc0000 [ 120.629860][ T29] audit: type=1400 audit(1761932539.910:12692): avc: denied { connect } for pid=8357 comm="syz.1.1789" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 120.656382][ T8359] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 120.669236][ T8359] ext4 filesystem being mounted at /226/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 120.681669][ T8371] xt_CT: No such helper "pptp" [ 120.764285][ T8382] netlink: 'syz.1.1793': attribute type 39 has an invalid length. [ 120.868574][ T5020] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.898186][ T8388] netlink: 'syz.3.1798': attribute type 3 has an invalid length. [ 120.906073][ T8388] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1798'. [ 120.916332][ T3821] Bluetooth: hci0: Frame reassembly failed (-84) [ 120.983180][ T29] audit: type=1400 audit(1761932540.290:12693): avc: denied { execute } for pid=8399 comm="syz.3.1803" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=24348 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 121.037587][ T29] audit: type=1326 audit(1761932540.340:12694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8404 comm="syz.1.1805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f637e74efc9 code=0x7ffc0000 [ 121.248269][ T8422] netlink: 'syz.0.1811': attribute type 39 has an invalid length. [ 121.458072][ T8434] xt_CT: No such helper "pptp" [ 122.175363][ T8451] lo speed is unknown, defaulting to 1000 [ 122.626874][ T8467] netlink: 'syz.2.1826': attribute type 39 has an invalid length. [ 122.684948][ T8448] syz.0.1823 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 122.699194][ T8448] CPU: 0 UID: 0 PID: 8448 Comm: syz.0.1823 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 122.699238][ T8448] Tainted: [W]=WARN [ 122.699247][ T8448] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 122.699260][ T8448] Call Trace: [ 122.699266][ T8448] [ 122.699287][ T8448] __dump_stack+0x1d/0x30 [ 122.699318][ T8448] dump_stack_lvl+0xe8/0x140 [ 122.699346][ T8448] dump_stack+0x15/0x1b [ 122.699466][ T8448] dump_header+0x81/0x220 [ 122.699508][ T8448] oom_kill_process+0x342/0x400 [ 122.699747][ T8448] out_of_memory+0x979/0xb80 [ 122.699791][ T8448] try_charge_memcg+0x610/0xa10 [ 122.699854][ T8448] obj_cgroup_charge_pages+0xa6/0x150 [ 122.699877][ T8448] __memcg_kmem_charge_page+0x9f/0x170 [ 122.699945][ T8448] __alloc_frozen_pages_noprof+0x188/0x360 [ 122.699984][ T8448] alloc_pages_mpol+0xb3/0x260 [ 122.700004][ T8448] ? alloc_pages_noprof+0xf4/0x130 [ 122.700079][ T8448] alloc_pages_noprof+0x90/0x130 [ 122.700108][ T8448] __vmalloc_node_range_noprof+0x7a5/0xed0 [ 122.700243][ T8448] __kvmalloc_node_noprof+0x483/0x670 [ 122.700286][ T8448] ? ip_set_alloc+0x24/0x30 [ 122.700345][ T8448] ? ip_set_alloc+0x24/0x30 [ 122.700384][ T8448] ? __kmalloc_cache_noprof+0x249/0x4a0 [ 122.700426][ T8448] ip_set_alloc+0x24/0x30 [ 122.700483][ T8448] hash_netiface_create+0x282/0x740 [ 122.700530][ T8448] ? __pfx_hash_netiface_create+0x10/0x10 [ 122.700644][ T8448] ip_set_create+0x3cc/0x970 [ 122.700683][ T8448] ? __nla_parse+0x40/0x60 [ 122.700715][ T8448] nfnetlink_rcv_msg+0x4c6/0x590 [ 122.700895][ T8448] netlink_rcv_skb+0x123/0x220 [ 122.700935][ T8448] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 122.700978][ T8448] nfnetlink_rcv+0x167/0x16c0 [ 122.701066][ T8448] ? kmem_cache_free+0xe4/0x3d0 [ 122.701146][ T8448] ? __kfree_skb+0x109/0x150 [ 122.701186][ T8448] ? nlmon_xmit+0x4f/0x60 [ 122.701211][ T8448] ? consume_skb+0x49/0x150 [ 122.701240][ T8448] ? nlmon_xmit+0x4f/0x60 [ 122.701289][ T8448] ? dev_hard_start_xmit+0x3b0/0x3e0 [ 122.701335][ T8448] ? __dev_queue_xmit+0x1200/0x2000 [ 122.701441][ T8448] ? __dev_queue_xmit+0x182/0x2000 [ 122.701493][ T8448] ? ref_tracker_free+0x37d/0x3e0 [ 122.701540][ T8448] ? __netlink_deliver_tap+0x4dc/0x500 [ 122.701587][ T8448] netlink_unicast+0x5c0/0x690 [ 122.701628][ T8448] netlink_sendmsg+0x58b/0x6b0 [ 122.701670][ T8448] ? __pfx_netlink_sendmsg+0x10/0x10 [ 122.701694][ T8448] __sock_sendmsg+0x145/0x180 [ 122.701787][ T8448] ____sys_sendmsg+0x31e/0x4e0 [ 122.701825][ T8448] ___sys_sendmsg+0x17b/0x1d0 [ 122.701928][ T8448] __x64_sys_sendmsg+0xd4/0x160 [ 122.701957][ T8448] x64_sys_call+0x191e/0x3000 [ 122.701980][ T8448] do_syscall_64+0xd2/0x200 [ 122.702075][ T8448] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 122.702105][ T8448] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 122.702147][ T8448] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.702182][ T8448] RIP: 0033:0x7f39b034efc9 [ 122.702205][ T8448] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 122.702228][ T8448] RSP: 002b:00007f39aedaf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 122.702256][ T8448] RAX: ffffffffffffffda RBX: 00007f39b05a5fa0 RCX: 00007f39b034efc9 [ 122.702273][ T8448] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000003 [ 122.702285][ T8448] RBP: 00007f39b03d1f91 R08: 0000000000000000 R09: 0000000000000000 [ 122.702300][ T8448] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 122.702325][ T8448] R13: 00007f39b05a6038 R14: 00007f39b05a5fa0 R15: 00007ffd75423788 [ 122.702348][ T8448] [ 122.730369][ T8473] loop2: detected capacity change from 0 to 512 [ 122.730845][ T8448] memory: usage 307200kB, limit 307200kB, failcnt 1706 [ 123.045264][ T3975] Bluetooth: hci0: command 0x1003 tx timeout [ 123.049905][ T8448] memory+swap: usage 307564kB, limit 9007199254740988kB, failcnt 0 [ 123.052967][ T3529] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 123.059185][ T8448] kmem: usage 307200kB, limit 9007199254740988kB, failcnt 0 [ 123.059201][ T8448] Memory cgroup stats for /syz0: [ 123.066797][ T8448] cache 0 [ 123.086738][ T8473] EXT4-fs error (device loop2): ext4_expand_extra_isize_ea:2803: inode #11: comm syz.2.1826: corrupted xattr block 95: invalid header [ 123.093487][ T8448] rss 0 [ 123.093499][ T8448] shmem 0 [ 123.093507][ T8448] mapped_file 0 [ 123.093514][ T8448] dirty 0 [ 123.093520][ T8448] writeback 0 [ 123.093526][ T8448] workingset_refault_anon 2254 [ 123.093534][ T8448] workingset_refault_file 713 [ 123.093541][ T8448] swap 372736 [ 123.093547][ T8448] swapcached 0 [ 123.146931][ T8448] pgpgin 105521 [ 123.150425][ T8448] pgpgout 105521 [ 123.153977][ T8448] pgfault 126799 [ 123.157523][ T8448] pgmajfault 336 [ 123.161194][ T8448] inactive_anon 0 [ 123.164905][ T8448] active_anon 0 [ 123.168418][ T8448] inactive_file 0 [ 123.172086][ T8448] active_file 0 [ 123.175555][ T8448] unevictable 0 [ 123.179104][ T8448] hierarchical_memory_limit 314572800 [ 123.184622][ T8448] hierarchical_memsw_limit 9223372036854771712 [ 123.190836][ T8448] total_cache 0 [ 123.192401][ T8473] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.1826: bg 0: block 7: invalid block bitmap [ 123.194301][ T8448] total_rss 0 [ 123.194312][ T8448] total_shmem 0 [ 123.194322][ T8448] total_mapped_file 0 [ 123.206825][ T8473] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 123.209851][ T8448] total_dirty 0 [ 123.209862][ T8448] total_writeback 0 [ 123.209872][ T8448] total_workingset_refault_anon 2254 [ 123.213546][ T8473] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2967: inode #11: comm syz.2.1826: corrupted xattr block 95: invalid header [ 123.217302][ T8448] total_workingset_refault_file 713 [ 123.217315][ T8448] total_swap 372736 [ 123.217324][ T8448] total_swapcached 0 [ 123.226240][ T8473] EXT4-fs warning (device loop2): ext4_evict_inode:274: xattr delete (err -117) [ 123.229500][ T8448] total_pgpgin 105521 [ 123.229512][ T8448] total_pgpgout 105521 [ 123.229522][ T8448] total_pgfault 126799 [ 123.233372][ T8473] EXT4-fs (loop2): 1 orphan inode deleted [ 123.238625][ T8448] total_pgmajfault 336 [ 123.238636][ T8448] total_inactive_anon 0 [ 123.238646][ T8448] total_active_anon 0 [ 123.238655][ T8448] total_inactive_file 0 [ 123.238663][ T8448] total_active_file 0 [ 123.253600][ T8473] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 123.257336][ T8448] total_unevictable 0 [ 123.257348][ T8448] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.1823,pid=8447,uid=0 [ 123.343852][ T8448] Memory cgroup out of memory: Killed process 8447 (syz.0.1823) total-vm:96004kB, anon-rss:1264kB, file-rss:22184kB, shmem-rss:128kB, UID:0 pgtables:148kB oom_score_adj:1000 [ 123.363806][ T5020] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.897552][ T8518] loop5: detected capacity change from 0 to 128 [ 123.905317][ T8518] EXT4-fs: Ignoring removed nobh option [ 123.916997][ T8518] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 123.930420][ T8518] ext4 filesystem being mounted at /237/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 123.976463][ T4852] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 124.110016][ T8537] netlink: 'syz.1.1866': attribute type 10 has an invalid length. [ 124.118564][ T8537] bond0: (slave dummy0): Releasing backup interface [ 124.127530][ T8537] team0: Failed to send options change via netlink (err -105) [ 124.135182][ T8537] team0: Port device dummy0 added [ 124.142934][ T8537] netlink: 'syz.1.1866': attribute type 10 has an invalid length. [ 124.151557][ T8537] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 124.163685][ T8537] team0: Failed to send options change via netlink (err -105) [ 124.171481][ T8537] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 124.180905][ T8537] team0: Port device dummy0 removed [ 124.187654][ T8537] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 124.595653][ T8550] veth1_to_bond: entered allmulticast mode [ 124.609752][ T8550] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1857'. [ 124.623479][ T8550] bond0: (slave bond_slave_1): Releasing backup interface [ 124.635425][ T8550] veth1_to_bond (unregistering): left allmulticast mode [ 124.717595][ T8554] pim6reg0: tun_chr_ioctl cmd 35108 [ 124.912915][ T8561] batman_adv: batadv0: Removing interface: vxlan0 [ 125.270140][ T29] kauditd_printk_skb: 323 callbacks suppressed [ 125.270160][ T29] audit: type=1326 audit(1761932544.570:13018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8541 comm="syz.1.1868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f637e745e67 code=0x7ffc0000 [ 125.300045][ T29] audit: type=1326 audit(1761932544.570:13019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8541 comm="syz.1.1868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f637e6eb099 code=0x7ffc0000 [ 125.323816][ T29] audit: type=1326 audit(1761932544.570:13020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8541 comm="syz.1.1868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f637e74efc9 code=0x7ffc0000 [ 125.347631][ T29] audit: type=1326 audit(1761932544.620:13021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8541 comm="syz.1.1868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f637e745e67 code=0x7ffc0000 [ 125.371206][ T29] audit: type=1326 audit(1761932544.620:13022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8541 comm="syz.1.1868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f637e6eb099 code=0x7ffc0000 [ 125.394712][ T29] audit: type=1326 audit(1761932544.620:13023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8541 comm="syz.1.1868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f637e74efc9 code=0x7ffc0000 [ 125.418306][ T29] audit: type=1326 audit(1761932544.650:13024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8541 comm="syz.1.1868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f637e745e67 code=0x7ffc0000 [ 125.441780][ T29] audit: type=1326 audit(1761932544.650:13025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8541 comm="syz.1.1868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f637e6eb099 code=0x7ffc0000 [ 125.465189][ T29] audit: type=1326 audit(1761932544.650:13026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8541 comm="syz.1.1868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f637e74efc9 code=0x7ffc0000 [ 125.523613][ T29] audit: type=1326 audit(1761932544.650:13027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8541 comm="syz.1.1868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f637e745e67 code=0x7ffc0000 [ 126.570930][ T8627] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1885'. [ 126.791525][ T8634] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8634 comm=syz.1.1888 [ 126.854296][ T8639] batman_adv: batadv0: Removing interface: vxlan0 [ 126.874836][ T8639] batadv0 (unregistering): left allmulticast mode [ 126.881545][ T8639] batadv0 (unregistering): left promiscuous mode [ 126.888240][ T8639] bridge0: port 1(batadv0) entered disabled state [ 127.313799][ T8647] IPv6: Can't replace route, no match found [ 128.152307][ T8684] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1908'. [ 128.161337][ T8684] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1908'. [ 128.999258][ T8706] lo speed is unknown, defaulting to 1000 [ 129.288713][ T8725] loop5: detected capacity change from 0 to 1024 [ 129.310586][ T8728] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1928'. [ 129.319576][ T8728] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1928'. [ 129.330733][ T8725] ext4: Unknown parameter 'uid<00000000000000000000' [ 129.552901][ T8738] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1931'. [ 129.957132][ T8766] netlink: 'syz.3.1943': attribute type 1 has an invalid length. [ 129.972706][ T8766] 8021q: adding VLAN 0 to HW filter on device bond2 [ 129.987561][ T8766] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1943'. [ 129.998277][ T8766] bond2 (unregistering): Released all slaves [ 130.241944][ T8774] netlink: 'syz.1.1956': attribute type 13 has an invalid length. [ 130.273404][ T8775] loop5: detected capacity change from 0 to 2048 [ 130.294912][ T8775] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 130.340908][ T29] kauditd_printk_skb: 344 callbacks suppressed [ 130.340924][ T29] audit: type=1326 audit(1761932549.640:13372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8782 comm="syz.0.1948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39b034efc9 code=0x7ffc0000 [ 130.370885][ T29] audit: type=1326 audit(1761932549.640:13373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8782 comm="syz.0.1948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39b034efc9 code=0x7ffc0000 [ 130.400420][ T29] audit: type=1326 audit(1761932549.700:13374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8782 comm="syz.0.1948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f39b034efc9 code=0x7ffc0000 [ 130.424105][ T29] audit: type=1326 audit(1761932549.700:13375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8782 comm="syz.0.1948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39b034efc9 code=0x7ffc0000 [ 130.431151][ T4852] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.447929][ T29] audit: type=1326 audit(1761932549.710:13376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8782 comm="syz.0.1948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f39b034efc9 code=0x7ffc0000 [ 130.480129][ T29] audit: type=1326 audit(1761932549.710:13377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8782 comm="syz.0.1948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39b034efc9 code=0x7ffc0000 [ 130.503711][ T29] audit: type=1326 audit(1761932549.710:13378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8782 comm="syz.0.1948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39b034efc9 code=0x7ffc0000 [ 130.527309][ T29] audit: type=1326 audit(1761932549.710:13379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8782 comm="syz.0.1948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f39b034efc9 code=0x7ffc0000 [ 130.550912][ T29] audit: type=1326 audit(1761932549.710:13380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8782 comm="syz.0.1948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39b034efc9 code=0x7ffc0000 [ 130.574421][ T29] audit: type=1326 audit(1761932549.710:13381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8782 comm="syz.0.1948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39b034efc9 code=0x7ffc0000 [ 130.812263][ T8808] tipc: Enabled bearer , priority 0 [ 130.830522][ T8805] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1958'. [ 130.840303][ T8808] tipc: Disabling bearer [ 130.875008][ T8813] bridge: RTM_NEWNEIGH with invalid ether address [ 130.950555][ T8820] netlink: 'syz.0.1965': attribute type 13 has an invalid length. [ 131.449847][ T8832] netlink: 'syz.0.1968': attribute type 30 has an invalid length. [ 131.633140][ T8842] vlan0: entered allmulticast mode [ 131.638319][ T8842] bridge_slave_0: entered allmulticast mode [ 131.846605][ T8840] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 131.864088][ T8840] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 131.959339][ T8860] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1980'. [ 132.199481][ T8879] netlink: 1984 bytes leftover after parsing attributes in process `syz.1.1987'. [ 132.208825][ T8879] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1987'. [ 132.742280][ T8891] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1992'. [ 132.770205][ T8891] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 132.886423][ T8897] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1995'. [ 132.920430][ T8899] netlink: 'syz.3.1996': attribute type 13 has an invalid length. [ 132.956274][ T8903] block device autoloading is deprecated and will be removed. [ 133.402957][ T8924] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2003'. [ 133.974710][ T8926] lo speed is unknown, defaulting to 1000 [ 134.093501][ T8939] netlink: 204 bytes leftover after parsing attributes in process `syz.5.2008'. [ 134.655446][ T8956] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2025'. [ 135.040711][ T8981] netlink: 'syz.2.2021': attribute type 13 has an invalid length. [ 135.924809][ T9002] __nla_validate_parse: 1 callbacks suppressed [ 135.924828][ T9002] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2034'. [ 136.052966][ T29] kauditd_printk_skb: 49 callbacks suppressed [ 136.052984][ T29] audit: type=1326 audit(1761932555.360:13431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9010 comm="syz.3.2039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3616fefc9 code=0x7ffc0000 [ 136.114742][ T29] audit: type=1326 audit(1761932555.390:13432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9010 comm="syz.3.2039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3616fefc9 code=0x7ffc0000 [ 136.138411][ T29] audit: type=1326 audit(1761932555.390:13433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9010 comm="syz.3.2039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe3616fefc9 code=0x7ffc0000 [ 136.162190][ T29] audit: type=1326 audit(1761932555.390:13434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9010 comm="syz.3.2039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3616fefc9 code=0x7ffc0000 [ 136.185768][ T29] audit: type=1326 audit(1761932555.390:13435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9010 comm="syz.3.2039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3616fefc9 code=0x7ffc0000 [ 136.209375][ T29] audit: type=1326 audit(1761932555.390:13436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9010 comm="syz.3.2039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe3616fefc9 code=0x7ffc0000 [ 136.232903][ T29] audit: type=1326 audit(1761932555.390:13437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9010 comm="syz.3.2039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3616fefc9 code=0x7ffc0000 [ 136.256628][ T29] audit: type=1326 audit(1761932555.390:13438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9010 comm="syz.3.2039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe3616fefc9 code=0x7ffc0000 [ 136.280409][ T29] audit: type=1326 audit(1761932555.390:13439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9010 comm="syz.3.2039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3616fefc9 code=0x7ffc0000 [ 136.304165][ T29] audit: type=1326 audit(1761932555.390:13440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9010 comm="syz.3.2039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe3616fefc9 code=0x7ffc0000 [ 136.411966][ T9023] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2046'. [ 136.425823][ T9025] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2045'. [ 136.456680][ T9023] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2046'. [ 136.519105][ T9039] Cannot find set identified by id 0 to match [ 137.357830][ T9060] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2067'. [ 137.566390][ T9075] loop1: detected capacity change from 0 to 512 [ 137.573760][ T9075] ext4: Unknown parameter 'subj_type' [ 137.934568][ T9105] loop5: detected capacity change from 0 to 512 [ 137.953095][ T9105] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 137.969239][ T9105] ext4 filesystem being mounted at /281/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 137.999858][ T4852] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.116762][ T9122] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2085'. [ 138.264830][ T9143] loop1: detected capacity change from 0 to 164 [ 138.274693][ T9143] Unsupported NM flag settings (8) [ 138.386293][ T9161] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2103'. [ 138.395300][ T9161] netlink: 'syz.2.2103': attribute type 30 has an invalid length. [ 138.407494][ T3806] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 138.416272][ T3806] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 138.424806][ T3806] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 138.435406][ T3806] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 138.632419][ T9194] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2111'. [ 138.641465][ T9194] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2111'. [ 138.683856][ T9194] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2111'. [ 139.774348][ T9341] team0: Port device team_slave_1 removed [ 140.883900][ T9411] netlink: 'syz.0.2157': attribute type 10 has an invalid length. [ 140.914526][ T9411] $Hÿ: (slave dummy0): Releasing backup interface [ 140.950866][ T9411] dummy0: left promiscuous mode [ 141.026512][ T9411] team0: Port device dummy0 added [ 141.102346][ T29] kauditd_printk_skb: 219 callbacks suppressed [ 141.102363][ T29] audit: type=1326 audit(1761932560.410:13660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9418 comm="syz.5.2160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00be17efc9 code=0x7ffc0000 [ 141.183731][ T29] audit: type=1326 audit(1761932560.440:13661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9418 comm="syz.5.2160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f00be17efc9 code=0x7ffc0000 [ 141.207213][ T29] audit: type=1326 audit(1761932560.440:13662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9418 comm="syz.5.2160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00be17efc9 code=0x7ffc0000 [ 141.230781][ T29] audit: type=1326 audit(1761932560.440:13663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9418 comm="syz.5.2160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00be17efc9 code=0x7ffc0000 [ 141.254405][ T29] audit: type=1326 audit(1761932560.440:13664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9418 comm="syz.5.2160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f00be17efc9 code=0x7ffc0000 [ 141.277826][ T29] audit: type=1400 audit(1761932560.440:13665): avc: denied { getopt } for pid=9418 comm="syz.5.2160" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 141.297395][ T29] audit: type=1326 audit(1761932560.440:13666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9418 comm="syz.5.2160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00be17efc9 code=0x7ffc0000 [ 141.320959][ T29] audit: type=1326 audit(1761932560.440:13667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9418 comm="syz.5.2160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00be17efc9 code=0x7ffc0000 [ 141.344639][ T29] audit: type=1326 audit(1761932560.440:13668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9418 comm="syz.5.2160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f00be17efc9 code=0x7ffc0000 [ 141.368238][ T29] audit: type=1326 audit(1761932560.440:13669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9418 comm="syz.5.2160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00be17efc9 code=0x7ffc0000 [ 141.793187][ T9438] bridge0: port 1(batadv0) entered blocking state [ 141.799950][ T9438] bridge0: port 1(batadv0) entered disabled state [ 141.820363][ T9438] batadv0: entered allmulticast mode [ 141.836951][ T9438] batadv0: entered promiscuous mode [ 141.905539][ T9446] bridge: RTM_NEWNEIGH with invalid ether address [ 142.028921][ T9454] __nla_validate_parse: 4 callbacks suppressed [ 142.028940][ T9454] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2175'. [ 142.168507][ T9465] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2180'. [ 142.195991][ T9465] netem: change failed [ 142.290161][ T31] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 142.299469][ T31] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 142.385939][ T9479] loop5: detected capacity change from 0 to 512 [ 142.394433][ T9479] EXT4-fs (loop5): orphan cleanup on readonly fs [ 142.401250][ T9479] EXT4-fs error (device loop5): ext4_orphan_get:1418: comm syz.5.2186: bad orphan inode 13 [ 142.433974][ T9479] ext4_test_bit(bit=12, block=18) = 1 [ 142.439404][ T9479] is_bad_inode(inode)=0 [ 142.443637][ T9479] NEXT_ORPHAN(inode)=2130706432 [ 142.448537][ T9479] max_ino=32 [ 142.451802][ T9479] i_nlink=1 [ 142.513690][ T9479] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 142.568683][ T9479] EXT4-fs (loop5): warning: mounting fs with errors, running e2fsck is recommended [ 142.600611][ T9479] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.2186: bg 0: block 248: padding at end of block bitmap is not set [ 142.628648][ T9479] EXT4-fs error (device loop5): ext4_acquire_dquot:6945: comm syz.5.2186: Failed to acquire dquot type 1 [ 142.660891][ T9479] EXT4-fs warning (device loop5): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 142.696566][ T9491] lo speed is unknown, defaulting to 1000 [ 142.710790][ T4852] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.802693][ T9493] SELinux: Context @“|Á0®A•ÙWiäS‰¾Ñ±4À$€ œÔEtÚyÖgB±E¼EÇAŠ2zL³»—p{c|^;tݾîHRן臟Áñg is not valid (left unmapped). [ 142.849025][ T9502] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2195'. [ 142.889511][ T9502] bond3: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 142.913179][ T9502] bond3 (unregistering): Released all slaves [ 142.941533][ T9498] bridge: RTM_NEWNEIGH with invalid ether address [ 142.979330][ T9509] lo speed is unknown, defaulting to 1000 [ 143.673059][ T9559] netlink: 'syz.0.2216': attribute type 1 has an invalid length. [ 143.688974][ T9559] 8021q: adding VLAN 0 to HW filter on device bond0 [ 143.708697][ T9559] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 143.718365][ T9559] bond0: (slave batadv1): making interface the new active one [ 143.727745][ T9559] bond0: (slave batadv1): Enslaving as an active interface with an up link [ 143.964008][ T9579] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2224'. [ 143.973072][ T9579] netlink: 108 bytes leftover after parsing attributes in process `syz.0.2224'. [ 143.982390][ T9579] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2224'. [ 143.991699][ T9579] netlink: 108 bytes leftover after parsing attributes in process `syz.0.2224'. [ 144.000878][ T9579] netlink: 84 bytes leftover after parsing attributes in process `syz.0.2224'. [ 144.049166][ T9584] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2227'. [ 144.091256][ T9584] 8021q: adding VLAN 0 to HW filter on device bond3 [ 144.113905][ T9584] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2227'. [ 144.127549][ T9584] bond3 (unregistering): Released all slaves [ 144.232907][ T9600] netlink: 'syz.0.2234': attribute type 9 has an invalid length. [ 145.081115][ T9645] lo speed is unknown, defaulting to 1000 [ 145.168887][ T9651] netlink: 'syz.2.2255': attribute type 1 has an invalid length. [ 145.191016][ T9651] 8021q: adding VLAN 0 to HW filter on device bond3 [ 145.208669][ T9651] bond3 (unregistering): Released all slaves [ 145.439839][ T9663] syzkaller0: entered allmulticast mode [ 145.450348][ T9663] syzkaller0: entered promiscuous mode [ 145.467744][ T9663] syzkaller0 (unregistering): left allmulticast mode [ 145.474565][ T9663] syzkaller0 (unregistering): left promiscuous mode [ 145.902603][ T9697] lo speed is unknown, defaulting to 1000 [ 145.925242][ T9701] pim6reg1: entered promiscuous mode [ 145.930644][ T9701] pim6reg1: entered allmulticast mode [ 146.037096][ T9709] bridge0: port 3(batadv0) entered disabled state [ 146.050870][ T9709] bridge_slave_1: left allmulticast mode [ 146.056631][ T9709] bridge_slave_1: left promiscuous mode [ 146.062701][ T9709] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.073901][ T9709] bridge_slave_0: left promiscuous mode [ 146.079869][ T9709] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.150964][ T29] kauditd_printk_skb: 128 callbacks suppressed [ 146.150978][ T29] audit: type=1326 audit(1761932565.460:13796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9705 comm="syz.5.2279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00be17efc9 code=0x7ffc0000 [ 146.204660][ T29] audit: type=1326 audit(1761932565.490:13797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9705 comm="syz.5.2279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f00be17efc9 code=0x7ffc0000 [ 146.228507][ T29] audit: type=1326 audit(1761932565.490:13798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9705 comm="syz.5.2279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f00be17f003 code=0x7ffc0000 [ 146.251977][ T29] audit: type=1326 audit(1761932565.500:13799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9705 comm="syz.5.2279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f00be17da7f code=0x7ffc0000 [ 146.252247][ T9706] loop5: detected capacity change from 0 to 8192 [ 146.282049][ T29] audit: type=1326 audit(1761932565.540:13800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9705 comm="syz.5.2279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f00be17f057 code=0x7ffc0000 [ 146.305643][ T29] audit: type=1326 audit(1761932565.560:13801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9705 comm="syz.5.2279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f00be17d810 code=0x7ffc0000 [ 146.329218][ T29] audit: type=1326 audit(1761932565.560:13802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9705 comm="syz.5.2279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f00be17ebcb code=0x7ffc0000 [ 146.357896][ T29] audit: type=1326 audit(1761932565.620:13803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9705 comm="syz.5.2279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f00be17dc2a code=0x7ffc0000 [ 146.381417][ T29] audit: type=1326 audit(1761932565.620:13804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9705 comm="syz.5.2279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f00be17dc2a code=0x7ffc0000 [ 146.404792][ T29] audit: type=1326 audit(1761932565.620:13805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9705 comm="syz.5.2279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f00be17d717 code=0x7ffc0000 [ 146.544781][ T9732] netlink: 'syz.0.2286': attribute type 4 has an invalid length. [ 146.558200][ T5160] lo speed is unknown, defaulting to 1000 [ 146.564040][ T5160] syz2: Port: 1 Link DOWN [ 146.636583][ T9742] netlink: 'syz.2.2292': attribute type 1 has an invalid length. [ 146.673122][ T9742] 8021q: adding VLAN 0 to HW filter on device bond3 [ 146.811152][ T9742] bond3 (unregistering): Released all slaves [ 147.081000][ T9763] lo: Caught tx_queue_len zero misconfig [ 147.229757][ T9767] netlink: 'gtp': attribute type 12 has an invalid length. [ 147.420911][ T9780] __nla_validate_parse: 8 callbacks suppressed [ 147.420931][ T9780] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2309'. [ 147.452813][ T9784] loop5: detected capacity change from 0 to 512 [ 147.459406][ T9784] EXT4-fs: Ignoring removed bh option [ 147.470902][ T9780] team1: entered promiscuous mode [ 147.476045][ T9780] team1: entered allmulticast mode [ 147.482771][ T9780] 8021q: adding VLAN 0 to HW filter on device team1 [ 147.490302][ T9784] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 147.506126][ T9784] ext4 filesystem being mounted at /317/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 147.671532][ T9804] cgroup: Unknown subsys name 'cpuset' [ 147.824050][ T9811] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2320'. [ 147.878899][ T9818] tipc: Started in network mode [ 147.884014][ T9818] tipc: Node identity ac14140f, cluster identity 4711 [ 147.899723][ T9818] tipc: New replicast peer: 255.255.255.83 [ 147.905889][ T9818] tipc: Enabled bearer , priority 10 [ 147.966193][ T10] IPVS: starting estimator thread 0... [ 148.070198][ T9826] IPVS: using max 1920 ests per chain, 96000 per kthread [ 148.161381][ T9834] netlink: 200 bytes leftover after parsing attributes in process `syz.2.2330'. [ 148.224035][ T9838] vlan0: entered allmulticast mode [ 148.229234][ T9838] bridge_slave_0: entered allmulticast mode [ 148.264354][ T9840] cgroup: Unknown subsys name 'cpuset' [ 148.350447][ T9849] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2337'. [ 148.370518][ T9849] team1: entered promiscuous mode [ 148.375706][ T9849] team1: entered allmulticast mode [ 148.391352][ T9849] 8021q: adding VLAN 0 to HW filter on device team1 [ 148.427628][ T4852] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.452242][ T9855] netlink: 'syz.5.2341': attribute type 1 has an invalid length. [ 148.519014][ T9855] 8021q: adding VLAN 0 to HW filter on device bond3 [ 148.563647][ T9870] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2341'. [ 148.610916][ T9870] bond3 (unregistering): Released all slaves [ 148.665387][ T9875] cgroup: Unknown subsys name 'cpuset' [ 148.695283][ T9878] vlan1: entered allmulticast mode [ 148.794593][ T9887] loop5: detected capacity change from 0 to 256 [ 148.804682][ T9887] FAT-fs (loop5): bogus number of FAT sectors [ 148.810893][ T9887] FAT-fs (loop5): Can't find a valid FAT filesystem [ 148.900247][ T3396] tipc: Node number set to 2886997007 [ 148.918824][ T9899] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2358'. [ 148.927942][ T9899] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2358'. [ 148.937130][ T9899] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2358'. [ 148.946767][ T9899] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2358'. [ 148.955919][ T9899] netlink: 'syz.3.2358': attribute type 6 has an invalid length. [ 149.024464][ T9909] netlink: 96 bytes leftover after parsing attributes in process `syz.5.2362'. [ 150.354763][ T9974] netlink: 'syz.3.2387': attribute type 1 has an invalid length. [ 150.388386][ T9974] 8021q: adding VLAN 0 to HW filter on device bond2 [ 150.420605][ T9974] bond2 (unregistering): Released all slaves [ 150.748284][ T9991] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 150.757257][ T9991] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 150.929720][T10003] siw: device registration error -23 [ 151.060007][T10017] lo speed is unknown, defaulting to 1000 [ 151.373602][T10044] set match dimension is over the limit! [ 151.552332][ T29] kauditd_printk_skb: 336 callbacks suppressed [ 151.552347][ T29] audit: type=1326 audit(1761932570.860:14142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10052 comm="syz.5.2415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00be17efc9 code=0x7ffc0000 [ 151.569168][T10055] macsec0: entered promiscuous mode [ 151.587333][T10055] bridge0: entered promiscuous mode [ 151.621022][T10055] bridge0: port 1(macsec0) entered blocking state [ 151.623226][ T29] audit: type=1326 audit(1761932570.890:14143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10052 comm="syz.5.2415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00be17efc9 code=0x7ffc0000 [ 151.627514][T10055] bridge0: port 1(macsec0) entered disabled state [ 151.651125][ T29] audit: type=1326 audit(1761932570.890:14144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10052 comm="syz.5.2415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f00be17efc9 code=0x7ffc0000 [ 151.681271][ T29] audit: type=1326 audit(1761932570.890:14145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10052 comm="syz.5.2415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00be17efc9 code=0x7ffc0000 [ 151.704982][ T29] audit: type=1326 audit(1761932570.890:14146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10052 comm="syz.5.2415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00be17efc9 code=0x7ffc0000 [ 151.728675][ T29] audit: type=1326 audit(1761932570.890:14147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10052 comm="syz.5.2415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f00be17efc9 code=0x7ffc0000 [ 151.744443][T10055] macsec0: entered allmulticast mode [ 151.752448][ T29] audit: type=1326 audit(1761932570.890:14148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10052 comm="syz.5.2415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00be17efc9 code=0x7ffc0000 [ 151.757674][T10055] bridge0: entered allmulticast mode [ 151.781206][ T29] audit: type=1326 audit(1761932570.890:14149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10052 comm="syz.5.2415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f00be17efc9 code=0x7ffc0000 [ 151.810362][ T29] audit: type=1326 audit(1761932570.890:14150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10052 comm="syz.5.2415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00be17efc9 code=0x7ffc0000 [ 151.835081][ T29] audit: type=1326 audit(1761932570.890:14151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10052 comm="syz.5.2415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f00be17efc9 code=0x7ffc0000 [ 151.880424][T10055] macsec0: left allmulticast mode [ 151.885548][T10055] bridge0: left allmulticast mode [ 151.909588][T10055] bridge0: left promiscuous mode [ 152.035958][T10071] tipc: New replicast peer: 255.255.255.255 [ 152.042204][T10071] tipc: Enabled bearer , priority 10 [ 152.152273][T10087] netlink: 'syz.0.2430': attribute type 30 has an invalid length. [ 152.164294][T10089] Cannot find add_set index 2 as target [ 152.530128][T10109] __nla_validate_parse: 4 callbacks suppressed [ 152.530144][T10109] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2441'. [ 152.640634][T10117] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2445'. [ 152.676758][T10117] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2445'. [ 152.762777][T10125] lo speed is unknown, defaulting to 1000 [ 154.219324][T10224] macvtap0: entered promiscuous mode [ 154.237105][T10224] macvtap0: left promiscuous mode [ 154.441275][T10231] loop5: detected capacity change from 0 to 164 [ 154.458698][T10231] Unsupported NM flag settings (8) [ 154.520646][T10237] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2491'. [ 154.529603][T10237] netlink: 'syz.3.2491': attribute type 30 has an invalid length. [ 154.542250][ T31] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 154.555900][ T31] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 154.564564][ T31] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 154.572978][ T3806] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 154.607461][T10244] Cannot find add_set index 2 as target [ 154.718545][T10255] macvtap0: entered promiscuous mode [ 154.724515][T10255] macvtap0: left promiscuous mode [ 154.826730][T10266] loop1: detected capacity change from 0 to 512 [ 154.871797][T10266] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 154.884771][T10266] ext4 filesystem being mounted at /538/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 154.913062][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.933467][T10279] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2508'. [ 154.942507][T10279] netlink: 'syz.1.2508': attribute type 30 has an invalid length. [ 154.953969][ T3806] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 154.963317][ T3806] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 154.972037][ T3806] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 154.981105][ T3806] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 155.864258][T10310] netlink: 'syz.0.2519': attribute type 1 has an invalid length. [ 155.923778][T10313] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2519'. [ 155.992085][T10310] 8021q: adding VLAN 0 to HW filter on device bond1 [ 156.051528][T10313] bond1 (unregistering): Released all slaves [ 156.105034][T10315] netlink: 'syz.3.2518': attribute type 30 has an invalid length. [ 157.056153][ T29] kauditd_printk_skb: 913 callbacks suppressed [ 157.056171][ T29] audit: type=1326 audit(1761932576.360:15065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10342 comm="syz.1.2529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f637e74efc9 code=0x7ffc0000 [ 157.086111][ T29] audit: type=1326 audit(1761932576.360:15066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10342 comm="syz.1.2529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f637e74efc9 code=0x7ffc0000 [ 157.186401][ T29] audit: type=1326 audit(1761932576.440:15067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10342 comm="syz.1.2529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f637e74efc9 code=0x7ffc0000 [ 157.210067][ T29] audit: type=1326 audit(1761932576.440:15068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10342 comm="syz.1.2529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f637e74efc9 code=0x7ffc0000 [ 157.233746][ T29] audit: type=1326 audit(1761932576.440:15069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10342 comm="syz.1.2529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f637e74efc9 code=0x7ffc0000 [ 157.257349][ T29] audit: type=1326 audit(1761932576.440:15070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10342 comm="syz.1.2529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f637e74efc9 code=0x7ffc0000 [ 157.281103][ T29] audit: type=1326 audit(1761932576.440:15071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10342 comm="syz.1.2529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f637e74efc9 code=0x7ffc0000 [ 157.304725][ T29] audit: type=1326 audit(1761932576.440:15072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10342 comm="syz.1.2529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7f637e74efc9 code=0x7ffc0000 [ 157.328406][ T29] audit: type=1326 audit(1761932576.440:15073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10342 comm="syz.1.2529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f637e74efc9 code=0x7ffc0000 [ 157.352017][ T29] audit: type=1326 audit(1761932576.440:15074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10342 comm="syz.1.2529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=243 compat=0 ip=0x7f637e74efc9 code=0x7ffc0000 [ 157.488471][T10367] loop5: detected capacity change from 0 to 1024 [ 157.520958][T10367] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 158.091205][T10404] netlink: 'syz.1.2554': attribute type 30 has an invalid length. [ 158.132623][ T4852] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.338950][T10415] lo speed is unknown, defaulting to 1000 [ 158.377377][T10426] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2564'. [ 158.487658][T10439] netlink: 'syz.5.2569': attribute type 30 has an invalid length. [ 158.555119][T10446] netlink: 'syz.3.2572': attribute type 10 has an invalid length. [ 158.576929][T10446] team0: Port device dummy0 added [ 159.224124][T10484] bridge0: port 2(batadv2) entered blocking state [ 159.230677][T10484] bridge0: port 2(batadv2) entered disabled state [ 159.275709][T10484] batadv2: entered allmulticast mode [ 159.287606][T10484] batadv2: entered promiscuous mode [ 159.417640][T10493] bridge: RTM_NEWNEIGH with invalid ether address [ 159.730183][ T3769] batman_adv: batadv2: No IGMP Querier present - multicast optimizations disabled [ 159.739454][ T3769] batman_adv: batadv2: No MLD Querier present - multicast optimizations disabled [ 159.753862][T10515] bridge0: port 4(batadv2) entered blocking state [ 159.760470][T10515] bridge0: port 4(batadv2) entered disabled state [ 159.768956][T10515] batadv2: entered allmulticast mode [ 159.790729][T10515] batadv2: entered promiscuous mode [ 159.919472][T10525] bridge0: port 1(batadv1) entered blocking state [ 159.926098][T10525] bridge0: port 1(batadv1) entered disabled state [ 159.948339][T10525] batadv1: entered allmulticast mode [ 159.965237][T10525] batadv1: entered promiscuous mode [ 159.982203][T10529] lo: Caught tx_queue_len zero misconfig [ 159.987928][T10529] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2609'. [ 160.002165][T10529] netem: change failed [ 160.209413][T10538] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2612'. [ 160.257981][T10538] team1: entered promiscuous mode [ 160.263120][T10538] team1: entered allmulticast mode [ 160.268601][T10538] 8021q: adding VLAN 0 to HW filter on device team1 [ 160.275345][ T3793] batman_adv: batadv2: No IGMP Querier present - multicast optimizations disabled [ 160.284611][ T3793] batman_adv: batadv2: No MLD Querier present - multicast optimizations disabled [ 160.333894][T10543] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2613'. [ 160.420294][ T3793] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 160.429554][ T3793] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 161.065024][T10572] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 161.074866][T10572] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.090830][T10576] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2628'. [ 161.131758][T10572] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 161.141754][T10572] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.171548][T10572] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 161.181394][T10572] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.231177][T10572] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 161.241130][T10572] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.296732][ T3806] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 161.305026][ T3806] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.316518][ T3806] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 161.324793][ T3806] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.336259][ T3806] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 161.344615][ T3806] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.355768][ T3806] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 161.363993][ T3806] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.060459][ T29] kauditd_printk_skb: 219 callbacks suppressed [ 162.060478][ T29] audit: type=1326 audit(1761932581.370:15294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10617 comm="syz.5.2644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f00be11b099 code=0x7ffc0000 [ 162.090334][ T29] audit: type=1326 audit(1761932581.370:15295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10617 comm="syz.5.2644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00be17efc9 code=0x7ffc0000 [ 162.113997][ T29] audit: type=1326 audit(1761932581.370:15296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10617 comm="syz.5.2644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00be17efc9 code=0x7ffc0000 [ 162.149723][T10627] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2647'. [ 162.203348][T10627] team1: entered promiscuous mode [ 162.208448][T10627] team1: entered allmulticast mode [ 162.247195][T10627] 8021q: adding VLAN 0 to HW filter on device team1 [ 163.573418][T10714] lo speed is unknown, defaulting to 1000 [ 163.589334][ T29] audit: type=1326 audit(1761932582.890:15297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10711 comm="syz.0.2660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39b034efc9 code=0x7ffc0000 [ 163.612994][ T29] audit: type=1326 audit(1761932582.890:15298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10711 comm="syz.0.2660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39b034efc9 code=0x7ffc0000 [ 163.636665][ T29] audit: type=1326 audit(1761932582.890:15299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10711 comm="syz.0.2660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f39b034efc9 code=0x7ffc0000 [ 163.660400][ T29] audit: type=1326 audit(1761932582.890:15300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10711 comm="syz.0.2660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39b034efc9 code=0x7ffc0000 [ 163.684093][ T29] audit: type=1326 audit(1761932582.890:15301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10711 comm="syz.0.2660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=59 compat=0 ip=0x7f39b034efc9 code=0x7ffc0000 [ 163.707707][ T29] audit: type=1326 audit(1761932582.890:15302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10711 comm="syz.0.2660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39b034efc9 code=0x7ffc0000 [ 163.731344][ T29] audit: type=1326 audit(1761932582.890:15303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10711 comm="syz.0.2660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=216 compat=0 ip=0x7f39b034efc9 code=0x7ffc0000 [ 163.951907][T10728] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2669'. [ 163.971539][T10728] 8021q: adding VLAN 0 to HW filter on device bond2 [ 164.007591][T10728] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2669'. [ 164.038180][T10728] bond2 (unregistering): Released all slaves [ 164.406767][T10756] loop1: detected capacity change from 0 to 512 [ 164.414147][T10756] EXT4-fs: Ignoring removed nomblk_io_submit option [ 164.425833][T10756] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 164.437603][T10759] loop5: detected capacity change from 0 to 128 [ 164.446020][T10756] EXT4-fs (loop1): 1 truncate cleaned up [ 164.453538][T10759] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 164.466350][T10756] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 164.480121][T10756] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.2679'. [ 164.489631][T10759] ext4 filesystem being mounted at /395/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 164.513352][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.528975][T10770] netlink: 332 bytes leftover after parsing attributes in process `syz.2.2684'. [ 164.538548][T10770] netlink: 'syz.2.2684': attribute type 9 has an invalid length. [ 164.546498][T10770] netlink: 108 bytes leftover after parsing attributes in process `syz.2.2684'. [ 164.555579][T10770] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2684'. [ 164.597071][ T4852] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 164.834306][T10803] loop5: detected capacity change from 0 to 128 [ 164.966865][T10803] bio_check_eod: 13796 callbacks suppressed [ 164.966884][T10803] syz.5.2696: attempt to access beyond end of device [ 164.966884][T10803] loop5: rw=0, sector=2078, nr_sectors = 1 limit=128 [ 164.986253][T10803] Buffer I/O error on dev loop5, logical block 2078, async page read [ 165.112496][T10803] syz.5.2696: attempt to access beyond end of device [ 165.112496][T10803] loop5: rw=0, sector=2078, nr_sectors = 1 limit=128 [ 165.126023][T10803] Buffer I/O error on dev loop5, logical block 2078, async page read [ 165.134290][T10803] syz.5.2696: attempt to access beyond end of device [ 165.134290][T10803] loop5: rw=0, sector=2078, nr_sectors = 1 limit=128 [ 165.147603][T10803] Buffer I/O error on dev loop5, logical block 2078, async page read [ 165.344087][T10815] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 165.353963][T10815] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.471994][T10815] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 165.481828][T10815] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.550471][T10821] loop1: detected capacity change from 0 to 512 [ 165.562191][T10815] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 165.562552][T10821] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 165.572037][T10815] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.649210][T10821] EXT4-fs (loop1): 1 truncate cleaned up [ 165.656802][T10821] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 165.882146][T10815] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 165.892025][T10815] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.036149][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.045279][ T3826] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 166.053551][ T3826] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.063533][ T3826] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 166.072016][ T3826] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.133478][ T3826] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 166.141827][ T3826] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.210151][ T3826] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 166.218404][ T3826] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.375046][T10839] lo speed is unknown, defaulting to 1000 [ 166.420848][T10842] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 166.562218][T10842] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 166.677802][T10861] lo speed is unknown, defaulting to 1000 [ 166.747881][T10842] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 166.779598][T10865] syzkaller0: entered allmulticast mode [ 166.785651][T10865] syzkaller0: entered promiscuous mode [ 166.792000][T10842] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 166.808604][T10865] syzkaller0 (unregistering): left allmulticast mode [ 166.815631][T10865] syzkaller0 (unregistering): left promiscuous mode [ 166.889372][ T3795] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 166.904915][ T3795] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 166.916446][ T3795] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 166.937338][ T3795] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 166.991890][T10876] loop5: detected capacity change from 0 to 164 [ 166.999178][T10876] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 167.008972][T10876] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 167.033463][T10876] Symlink component flag not implemented [ 167.039163][T10876] Symlink component flag not implemented [ 167.045109][T10876] Symlink component flag not implemented (7) [ 167.051160][T10876] Symlink component flag not implemented (116) [ 167.077751][T10882] lo speed is unknown, defaulting to 1000 [ 167.123498][T10887] lo speed is unknown, defaulting to 1000 [ 167.235908][T10894] netlink: 'syz.1.2734': attribute type 21 has an invalid length. [ 167.250359][T10894] netlink: 'syz.1.2734': attribute type 1 has an invalid length. [ 167.258191][T10894] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2734'. [ 167.336379][T10901] syzkaller0: entered allmulticast mode [ 167.344183][T10901] syzkaller0: entered promiscuous mode [ 167.353547][T10901] syzkaller0 (unregistering): left allmulticast mode [ 167.360363][T10901] syzkaller0 (unregistering): left promiscuous mode [ 167.509710][T10911] loop5: detected capacity change from 0 to 2048 [ 167.551448][T10911] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 167.563812][T10911] ext4 filesystem being mounted at /412/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 167.645589][T10917] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.2741: bg 0: block 345: padding at end of block bitmap is not set [ 167.700357][T10917] EXT4-fs (loop5): Remounting filesystem read-only [ 167.707003][ T3795] EXT4-fs warning (device loop5): ext4_convert_unwritten_extents:4984: inode #15: block 1: len 15: ext4_ext_map_blocks returned -30 [ 167.765971][T10919] block device autoloading is deprecated and will be removed. [ 167.842444][ T4852] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.236646][T10939] lo speed is unknown, defaulting to 1000 [ 168.640316][T10969] pim6reg1: entered promiscuous mode [ 168.645652][T10969] pim6reg1: entered allmulticast mode [ 168.884328][T10978] loop5: detected capacity change from 0 to 2048 [ 168.929813][T10978] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 169.103542][ T4852] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.212797][ T29] kauditd_printk_skb: 90 callbacks suppressed [ 169.212813][ T29] audit: type=1400 audit(1761932588.500:15394): avc: denied { setopt } for pid=10993 comm="syz.0.2774" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 169.533282][T11008] team_slave_1: Caught tx_queue_len zero misconfig [ 169.586326][T11014] loop1: detected capacity change from 0 to 2048 [ 169.641483][T11014] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 169.714017][T11014] ext4 filesystem being mounted at /591/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 169.752171][T11021] wireguard0: entered promiscuous mode [ 169.757686][T11021] wireguard0: entered allmulticast mode [ 169.900083][T11025] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.2780: bg 0: block 345: padding at end of block bitmap is not set [ 169.950856][T11025] EXT4-fs (loop1): Remounting filesystem read-only [ 169.979271][ T3813] EXT4-fs warning (device loop1): ext4_convert_unwritten_extents:4984: inode #15: block 1: len 15: ext4_ext_map_blocks returned -30 [ 170.170416][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.271513][T11045] lo speed is unknown, defaulting to 1000 [ 170.484914][T11068] loop2: detected capacity change from 0 to 2048 [ 170.506272][T11068] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 170.518947][T11068] ext4 filesystem being mounted at /393/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 170.609499][T11077] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.2803: bg 0: block 345: padding at end of block bitmap is not set [ 170.624403][T11077] EXT4-fs (loop2): Remounting filesystem read-only [ 170.632193][ T3793] EXT4-fs warning (device loop2): ext4_convert_unwritten_extents:4984: inode #15: block 1: len 15: ext4_ext_map_blocks returned -30 [ 170.708397][ T29] audit: type=1326 audit(1761932590.010:15395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11081 comm="syz.3.2808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3616fefc9 code=0x7ffc0000 [ 170.732109][ T29] audit: type=1326 audit(1761932590.010:15396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11081 comm="syz.3.2808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fe3616fefc9 code=0x7ffc0000 [ 170.757173][ T5020] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.766258][ T29] audit: type=1326 audit(1761932590.040:15397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11081 comm="syz.3.2808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3616fefc9 code=0x7ffc0000 [ 170.790143][ T29] audit: type=1326 audit(1761932590.040:15398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11081 comm="syz.3.2808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3616fefc9 code=0x7ffc0000 [ 170.813842][ T29] audit: type=1326 audit(1761932590.050:15399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11081 comm="syz.3.2808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe3616fefc9 code=0x7ffc0000 [ 170.837474][ T29] audit: type=1326 audit(1761932590.050:15400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11081 comm="syz.3.2808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3616fefc9 code=0x7ffc0000 [ 170.846961][T11084] macvlan1: entered promiscuous mode [ 170.861145][ T29] audit: type=1326 audit(1761932590.050:15401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11081 comm="syz.3.2808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe3616fefc9 code=0x7ffc0000 [ 170.861190][ T29] audit: type=1326 audit(1761932590.050:15402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11081 comm="syz.3.2808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3616fefc9 code=0x7ffc0000 [ 170.868172][T11084] ipvlan0: entered promiscuous mode [ 170.890118][ T29] audit: type=1326 audit(1761932590.050:15403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11081 comm="syz.3.2808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe3616fefc9 code=0x7ffc0000 [ 170.915630][T11084] ipvlan0: left promiscuous mode [ 170.948271][T11084] macvlan1: left promiscuous mode [ 170.987990][T11088] lo speed is unknown, defaulting to 1000 [ 171.108452][T11098] loop2: detected capacity change from 0 to 8192 [ 171.150478][T11098] loop2: p1 < > p2 < p5 p6 > p3 p4 [ 171.151532][T11106] lo speed is unknown, defaulting to 1000 [ 171.155754][T11098] loop2: partition table partially beyond EOD, truncated [ 171.155854][T11098] loop2: p1 start 67108864 is beyond EOD, truncated [ 171.212323][T11098] loop2: p3 start 100859904 is beyond EOD, truncated [ 171.219160][T11098] loop2: p4 size 393216 extends beyond EOD, truncated [ 171.244400][T11098] loop2: p5 start 100859904 is beyond EOD, truncated [ 171.251222][T11098] loop2: p6 size 393216 extends beyond EOD, truncated [ 171.732857][T11133] netlink: 'syz.3.2829': attribute type 5 has an invalid length. [ 171.902342][T11145] loop5: detected capacity change from 0 to 4096 [ 171.913442][T11145] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 171.944045][ T4852] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.057681][T11156] netlink: 'syz.3.2839': attribute type 10 has an invalid length. [ 172.075001][T11156] netlink: 'syz.3.2839': attribute type 10 has an invalid length. [ 172.108166][T11156] team0: Port device dummy0 removed [ 172.347557][T11173] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11173 comm=syz.0.2847 [ 172.547868][T11191] SELinux: failed to load policy [ 172.580423][T11200] 9pnet: Could not find request transport: f0x0000000000000006 [ 172.607822][ T3793] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 172.616379][ T3793] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.624985][ T3793] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 172.633462][ T3793] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.641928][ T3793] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 172.650339][ T3793] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.658675][ T3793] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 172.667085][ T3793] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.314664][T11208] lo speed is unknown, defaulting to 1000 [ 173.426715][T11217] netlink: 176 bytes leftover after parsing attributes in process `syz.2.2863'. [ 173.830073][T11264] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2883'. [ 173.921586][T11273] netlink: 'syz.0.2888': attribute type 13 has an invalid length. [ 173.981132][T11280] netlink: 'syz.3.2891': attribute type 7 has an invalid length. [ 174.015518][T11273] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.022790][T11273] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.112063][T11289] netlink: 'syz.1.2895': attribute type 1 has an invalid length. [ 174.290923][T11273] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 174.325792][T11273] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 174.440154][T11273] batman_adv: batadv0: Interface deactivated: vxlan0 [ 174.479007][T11289] bond1: entered promiscuous mode [ 174.484522][T11289] 8021q: adding VLAN 0 to HW filter on device bond1 [ 174.502712][T11297] bond1: (slave bridge3): making interface the new active one [ 174.510293][T11297] bridge3: entered promiscuous mode [ 174.521793][T11297] bond1: (slave bridge3): Enslaving as an active interface with an up link [ 174.530730][ T3813] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 174.539649][ T3813] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.590950][ T3813] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 174.599899][ T3813] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.663509][ T3813] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 174.672458][ T3813] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.724075][ T3795] Bluetooth: hci0: Frame reassembly failed (-84) [ 174.732240][ T3813] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 174.741285][ T3813] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.904620][ T29] kauditd_printk_skb: 112 callbacks suppressed [ 174.904638][ T29] audit: type=1326 audit(1761932594.210:15516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11329 comm="syz.3.2913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3616fefc9 code=0x7ffc0000 [ 174.934771][ T29] audit: type=1326 audit(1761932594.210:15517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11329 comm="syz.3.2913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3616fefc9 code=0x7ffc0000 [ 175.004433][ T29] audit: type=1326 audit(1761932594.210:15518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11329 comm="syz.3.2913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fe3616fefc9 code=0x7ffc0000 [ 175.028380][ T29] audit: type=1326 audit(1761932594.210:15519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11329 comm="syz.3.2913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3616fefc9 code=0x7ffc0000 [ 175.051996][ T29] audit: type=1326 audit(1761932594.210:15520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11329 comm="syz.3.2913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3616fefc9 code=0x7ffc0000 [ 175.075674][ T29] audit: type=1326 audit(1761932594.270:15521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11329 comm="syz.3.2913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe3616fefc9 code=0x7ffc0000 [ 175.099307][ T29] audit: type=1326 audit(1761932594.270:15522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11329 comm="syz.3.2913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3616fefc9 code=0x7ffc0000 [ 175.109468][T11333] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.123045][ T29] audit: type=1326 audit(1761932594.270:15523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11329 comm="syz.3.2913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3616fefc9 code=0x7ffc0000 [ 175.123085][ T29] audit: type=1326 audit(1761932594.270:15524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11329 comm="syz.3.2913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=282 compat=0 ip=0x7fe3616fefc9 code=0x7ffc0000 [ 175.180645][ T29] audit: type=1326 audit(1761932594.270:15525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11329 comm="syz.3.2913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3616fefc9 code=0x7ffc0000 [ 175.288316][T11333] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.333593][T11333] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.411873][T11333] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.425622][T11350] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2920'. [ 175.475862][ T3795] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.487825][ T3795] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.505412][ T3795] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.539389][ T3784] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.593993][T11362] pimreg: entered allmulticast mode [ 175.601151][T11362] pimreg: left allmulticast mode [ 176.396102][T11387] netlink: 'syz.5.2937': attribute type 1 has an invalid length. [ 176.457213][T11387] 8021q: adding VLAN 0 to HW filter on device bond3 [ 176.594095][T11402] batman_adv: batadv0: Adding interface: dummy0 [ 176.600416][T11402] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 176.647566][T11402] batman_adv: batadv0: Interface activated: dummy0 [ 176.656468][T11407] batadv0: mtu less than device minimum [ 176.662662][T11407] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 176.673399][T11407] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 176.684074][T11407] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 176.694797][T11407] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 176.705525][T11407] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 176.716260][T11407] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 176.726979][T11407] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 176.737558][T11407] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 176.748317][T11407] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 176.780197][ T3975] Bluetooth: hci0: command 0x1003 tx timeout [ 176.782389][ T3529] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 176.841954][T11415] loop5: detected capacity change from 0 to 1024 [ 176.850155][T11415] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 176.860954][T11415] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 176.871958][T11415] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 176.887087][T11415] JBD2: no valid journal superblock found [ 176.892889][T11415] EXT4-fs (loop5): Could not load journal inode [ 176.904690][T11422] team0: Port device dummy0 removed [ 176.910405][T11422] batman_adv: batadv0: Adding interface: dummy0 [ 176.916668][T11422] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 176.942154][T11422] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 177.022445][T11431] netlink: 'syz.2.2954': attribute type 1 has an invalid length. [ 177.047534][T11431] 8021q: adding VLAN 0 to HW filter on device bond3 [ 177.070790][T11431] macvtap1: entered promiscuous mode [ 177.076146][T11431] bond3: entered promiscuous mode [ 177.081423][T11431] macvtap1: entered allmulticast mode [ 177.086818][T11431] bond3: entered allmulticast mode [ 177.160298][T11431] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 177.647773][ T6622] IPVS: starting estimator thread 0... [ 177.742975][T11457] IPVS: using max 2160 ests per chain, 108000 per kthread [ 177.846712][T11467] tipc: Started in network mode [ 177.851714][T11467] tipc: Node identity ac14140f, cluster identity 4711 [ 177.858808][T11467] tipc: New replicast peer: 255.255.255.255 [ 177.865077][T11467] tipc: Enabled bearer , priority 10 [ 177.892284][T11469] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2971'. [ 177.933151][T11469] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2971'. [ 178.177794][T11480] loop5: detected capacity change from 0 to 512 [ 178.279367][T11480] EXT4-fs error (device loop5): ext4_iget_extra_inode:5075: inode #15: comm syz.5.2974: corrupted in-inode xattr: invalid ea_ino [ 178.300396][T11480] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.2974: couldn't read orphan inode 15 (err -117) [ 178.351005][T11480] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 178.414176][ T4852] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.471335][T11492] lo speed is unknown, defaulting to 1000 [ 178.500413][T11499] netlink: 'syz.2.2983': attribute type 10 has an invalid length. [ 178.510665][T11500] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2984'. [ 178.553010][T11509] netlink: 'syz.2.2983': attribute type 10 has an invalid length. [ 178.577241][T11499] team0: Port device dummy0 added [ 178.592269][T11509] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 178.609928][T11509] team0: Failed to send options change via netlink (err -105) [ 178.617623][T11509] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 178.626622][T11509] team0: Port device dummy0 removed [ 178.634576][T11509] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 178.643440][T11500] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2984'. [ 178.708335][T11515] lo speed is unknown, defaulting to 1000 [ 178.884314][T11527] syzkaller0: entered allmulticast mode [ 178.931928][T11527] syzkaller0 (unregistering): left allmulticast mode [ 178.944385][T11536] loop2: detected capacity change from 0 to 512 [ 178.953353][T11536] EXT4-fs error (device loop2): ext4_iget_extra_inode:5075: inode #15: comm syz.2.2996: corrupted in-inode xattr: invalid ea_ino [ 178.967681][T11536] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.2996: couldn't read orphan inode 15 (err -117) [ 178.980418][T11536] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 178.992691][ T6622] tipc: Node number set to 2886997007 [ 179.047579][ T5020] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.354149][T11559] lo speed is unknown, defaulting to 1000 [ 179.527681][T11563] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.581811][T11563] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.714989][T11563] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.771915][T11563] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.860109][ T3793] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.881141][ T3793] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.903028][ T3801] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.930252][ T3801] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.081394][T11587] netlink: 660 bytes leftover after parsing attributes in process `syz.1.3020'. [ 180.377365][T11603] netlink: 'syz.5.3026': attribute type 1 has an invalid length. [ 180.449134][T11606] netlink: 'syz.1.3027': attribute type 10 has an invalid length. [ 180.495721][T11606] bond0: (slave dummy0): Releasing backup interface [ 180.523319][T11609] netlink: 'syz.1.3027': attribute type 10 has an invalid length. [ 180.570174][T11606] team0: Failed to send options change via netlink (err -105) [ 180.577716][T11606] team0: Port device dummy0 added [ 180.624598][T11609] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 180.689304][T11609] team0: Failed to send options change via netlink (err -105) [ 180.737095][T11609] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 180.767590][T11609] team0: Port device dummy0 removed [ 180.792231][T11609] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 181.000975][T11639] lo speed is unknown, defaulting to 1000 [ 181.583435][T11673] netlink: 'syz.5.3055': attribute type 10 has an invalid length. [ 181.594796][T11673] batman_adv: batadv0: Interface deactivated: dummy0 [ 181.603740][T11673] batman_adv: batadv0: Removing interface: dummy0 [ 181.613006][T11675] loop2: detected capacity change from 0 to 1024 [ 181.613959][T11673] team0: Port device dummy0 added [ 181.640819][T11675] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 181.654847][T11673] netlink: 'syz.5.3055': attribute type 10 has an invalid length. [ 181.664957][T11673] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 181.680680][T11673] team0: Failed to send options change via netlink (err -105) [ 181.698393][T11673] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 181.708559][T11673] team0: Port device dummy0 removed [ 181.718001][T11673] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 182.531914][ T5020] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 182.627267][T11713] netlink: 660 bytes leftover after parsing attributes in process `syz.3.3066'. [ 182.718922][ T29] kauditd_printk_skb: 54 callbacks suppressed [ 182.718940][ T29] audit: type=1326 audit(1761932602.020:15580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11715 comm="syz.2.3067" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f9178715e67 code=0x7ffc0000 [ 182.776443][ T29] audit: type=1326 audit(1761932602.070:15581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11715 comm="syz.2.3067" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f91786bb099 code=0x7ffc0000 [ 182.800054][ T29] audit: type=1326 audit(1761932602.070:15582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11715 comm="syz.2.3067" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f9178715e67 code=0x7ffc0000 [ 182.823740][ T29] audit: type=1326 audit(1761932602.070:15583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11715 comm="syz.2.3067" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f91786bb099 code=0x7ffc0000 [ 182.847290][ T29] audit: type=1326 audit(1761932602.070:15584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11715 comm="syz.2.3067" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f917871efc9 code=0x7ffc0000 [ 182.871031][ T29] audit: type=1326 audit(1761932602.070:15585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11715 comm="syz.2.3067" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f917871efc9 code=0x7ffc0000 [ 182.894640][ T29] audit: type=1326 audit(1761932602.070:15586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11715 comm="syz.2.3067" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f917871efc9 code=0x7ffc0000 [ 182.918332][ T29] audit: type=1326 audit(1761932602.070:15587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11715 comm="syz.2.3067" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f917871efc9 code=0x7ffc0000 [ 182.942124][ T29] audit: type=1326 audit(1761932602.070:15588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11715 comm="syz.2.3067" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f9178715e67 code=0x7ffc0000 [ 182.965731][ T29] audit: type=1326 audit(1761932602.070:15589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11715 comm="syz.2.3067" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f91786bb099 code=0x7ffc0000 [ 183.265871][T11725] syzkaller0: entered allmulticast mode [ 183.286718][T11725] syzkaller0 (unregistering): left allmulticast mode [ 183.451475][ T3807] Bluetooth: hci0: Frame reassembly failed (-84) [ 183.731249][T11751] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 183.781522][T11751] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 183.822251][T11751] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 183.906328][T11763] syzkaller0: entered allmulticast mode [ 183.914525][T11763] syzkaller0 (unregistering): left allmulticast mode [ 183.962382][T11751] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 184.036854][ T3785] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 184.047996][ T3785] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 184.059364][ T3819] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 184.070868][ T3819] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 184.144096][T11771] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11771 comm=syz.3.3091 [ 185.012014][T11800] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 185.021950][T11800] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.041926][T11800] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 185.051862][T11800] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.121569][T11800] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 185.131473][T11800] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.162015][T11800] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 185.171828][T11800] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.207753][ T37] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 185.216107][ T37] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.227754][ T37] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 185.236043][ T37] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.247615][ T3785] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 185.255830][ T3785] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.268002][ T37] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 185.276272][ T37] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.378699][T11812] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 185.378699][T11812] program syz.2.3105 not setting count and/or reply_len properly [ 185.500133][ T3975] Bluetooth: hci0: command 0x1003 tx timeout [ 185.500153][ T3529] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 185.536134][T11820] loop5: detected capacity change from 0 to 1024 [ 185.545647][T11820] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 185.793204][ T4852] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 186.019161][T11855] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3123'. [ 186.077293][T11863] netlink: 'syz.1.3127': attribute type 16 has an invalid length. [ 186.085335][T11863] netlink: 156 bytes leftover after parsing attributes in process `syz.1.3127'. [ 186.149754][T11865] lo speed is unknown, defaulting to 1000 [ 186.149843][T11867] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3128'. [ 186.164454][T11867] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3128'. [ 186.205166][T11867] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3128'. [ 186.214234][T11867] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3128'. [ 186.892735][T11911] SELinux: failed to load policy [ 186.966747][T11921] netlink: 96 bytes leftover after parsing attributes in process `syz.5.3150'. [ 187.024988][T11931] loop1: detected capacity change from 0 to 1024 [ 187.032263][T11931] EXT4-fs: Ignoring removed orlov option [ 187.042183][T11931] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 187.354078][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 187.906170][T11981] loop2: detected capacity change from 0 to 2048 [ 188.050344][T11981] Alternate GPT is invalid, using primary GPT. [ 188.056888][T11981] loop2: p2 p3 p7 [ 188.066785][T12001] netlink: 'syz.5.3183': attribute type 7 has an invalid length. [ 188.074615][T12001] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3183'. [ 188.163502][ T29] kauditd_printk_skb: 131 callbacks suppressed [ 188.163569][ T29] audit: type=1326 audit(1761932607.470:15721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12005 comm="syz.5.3185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00be17efc9 code=0x7ffc0000 [ 188.193428][ T29] audit: type=1326 audit(1761932607.470:15722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12005 comm="syz.5.3185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00be17efc9 code=0x7ffc0000 [ 188.217157][ T29] audit: type=1326 audit(1761932607.470:15723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12005 comm="syz.5.3185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f00be17efc9 code=0x7ffc0000 [ 188.240838][ T29] audit: type=1326 audit(1761932607.470:15724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12005 comm="syz.5.3185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00be17efc9 code=0x7ffc0000 [ 188.264512][ T29] audit: type=1326 audit(1761932607.470:15725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12005 comm="syz.5.3185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00be17efc9 code=0x7ffc0000 [ 188.288151][ T29] audit: type=1326 audit(1761932607.470:15726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12005 comm="syz.5.3185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f00be17efc9 code=0x7ffc0000 [ 188.312154][ T29] audit: type=1326 audit(1761932607.470:15727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12005 comm="syz.5.3185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00be17efc9 code=0x7ffc0000 [ 188.335773][ T29] audit: type=1326 audit(1761932607.470:15728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12005 comm="syz.5.3185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00be17efc9 code=0x7ffc0000 [ 188.359402][ T29] audit: type=1326 audit(1761932607.470:15729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12005 comm="syz.5.3185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f00be17efc9 code=0x7ffc0000 [ 188.383152][ T29] audit: type=1326 audit(1761932607.470:15730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12005 comm="syz.5.3185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00be17efc9 code=0x7ffc0000 [ 188.776484][T12034] loop2: detected capacity change from 0 to 1024 [ 188.795688][T12034] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 188.839698][T12002] syz.0.3182 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 188.853912][T12002] CPU: 1 UID: 0 PID: 12002 Comm: syz.0.3182 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 188.853945][T12002] Tainted: [W]=WARN [ 188.853952][T12002] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 188.854046][T12002] Call Trace: [ 188.854054][T12002] [ 188.854062][T12002] __dump_stack+0x1d/0x30 [ 188.854087][T12002] dump_stack_lvl+0xe8/0x140 [ 188.854117][T12002] dump_stack+0x15/0x1b [ 188.854143][T12002] dump_header+0x81/0x220 [ 188.854222][T12002] oom_kill_process+0x342/0x400 [ 188.854279][T12002] out_of_memory+0x979/0xb80 [ 188.854343][T12002] try_charge_memcg+0x610/0xa10 [ 188.854417][T12002] obj_cgroup_charge_pages+0xa6/0x150 [ 188.854439][T12002] __memcg_kmem_charge_page+0x9f/0x170 [ 188.854462][T12002] __alloc_frozen_pages_noprof+0x188/0x360 [ 188.854571][T12002] alloc_pages_mpol+0xb3/0x260 [ 188.854592][T12002] ? alloc_pages_noprof+0xf4/0x130 [ 188.854615][T12002] alloc_pages_noprof+0x90/0x130 [ 188.854636][T12002] __vmalloc_node_range_noprof+0x7a5/0xed0 [ 188.854739][T12002] __kvmalloc_node_noprof+0x483/0x670 [ 188.854791][T12002] ? ip_set_alloc+0x24/0x30 [ 188.854833][T12002] ? ip_set_alloc+0x24/0x30 [ 188.854939][T12002] ? __kmalloc_cache_noprof+0x249/0x4a0 [ 188.855021][T12002] ip_set_alloc+0x24/0x30 [ 188.855060][T12002] hash_netiface_create+0x282/0x740 [ 188.855150][T12002] ? __pfx_hash_netiface_create+0x10/0x10 [ 188.855196][T12002] ip_set_create+0x3cc/0x970 [ 188.855299][T12002] ? __nla_parse+0x40/0x60 [ 188.855351][T12002] nfnetlink_rcv_msg+0x4c6/0x590 [ 188.855416][T12002] netlink_rcv_skb+0x123/0x220 [ 188.855460][T12002] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 188.855502][T12002] nfnetlink_rcv+0x167/0x16c0 [ 188.855649][T12002] ? __list_del_entry_valid_or_report+0x65/0x130 [ 188.855696][T12002] ? __rmqueue_pcplist+0x9d2/0xbd0 [ 188.855788][T12002] ? should_fail_ex+0x30/0x280 [ 188.855811][T12002] ? selinux_nlmsg_lookup+0x99/0x890 [ 188.855837][T12002] ? __rcu_read_unlock+0x34/0x70 [ 188.855879][T12002] ? __netlink_lookup+0x266/0x2a0 [ 188.855910][T12002] netlink_unicast+0x5c0/0x690 [ 188.855950][T12002] netlink_sendmsg+0x58b/0x6b0 [ 188.855971][T12002] ? __pfx_netlink_sendmsg+0x10/0x10 [ 188.855997][T12002] __sock_sendmsg+0x145/0x180 [ 188.856141][T12002] ____sys_sendmsg+0x31e/0x4e0 [ 188.856225][T12002] ___sys_sendmsg+0x17b/0x1d0 [ 188.856338][T12002] __x64_sys_sendmsg+0xd4/0x160 [ 188.856368][T12002] x64_sys_call+0x191e/0x3000 [ 188.856410][T12002] do_syscall_64+0xd2/0x200 [ 188.856500][T12002] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 188.856547][T12002] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 188.856591][T12002] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 188.856615][T12002] RIP: 0033:0x7f39b034efc9 [ 188.856631][T12002] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 188.856715][T12002] RSP: 002b:00007f39aed8e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 188.856747][T12002] RAX: ffffffffffffffda RBX: 00007f39b05a6090 RCX: 00007f39b034efc9 [ 188.856763][T12002] RDX: 0000000000000800 RSI: 0000200000000200 RDI: 0000000000000004 [ 188.856831][T12002] RBP: 00007f39b03d1f91 R08: 0000000000000000 R09: 0000000000000000 [ 188.856842][T12002] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 188.856882][T12002] R13: 00007f39b05a6128 R14: 00007f39b05a6090 R15: 00007ffd75423788 [ 188.856908][T12002] [ 188.856916][T12002] memory: usage 307200kB, limit 307200kB, failcnt 2087 [ 189.196971][T12002] memory+swap: usage 307668kB, limit 9007199254740988kB, failcnt 0 [ 189.204881][T12002] kmem: usage 307200kB, limit 9007199254740988kB, failcnt 0 [ 189.212183][T12002] Memory cgroup stats for /syz0: [ 189.212371][T12002] cache 0 [ 189.220235][T12002] rss 0 [ 189.222992][T12002] shmem 0 [ 189.225949][T12002] mapped_file 0 [ 189.229442][T12002] dirty 0 [ 189.232400][T12002] writeback 0 [ 189.235679][T12002] workingset_refault_anon 2276 [ 189.240452][T12002] workingset_refault_file 975 [ 189.245137][T12002] swap 479232 [ 189.248410][T12002] swapcached 0 [ 189.251789][T12002] pgpgin 232232 [ 189.255265][T12002] pgpgout 232232 [ 189.258833][T12002] pgfault 212679 [ 189.262390][T12002] pgmajfault 353 [ 189.265927][T12002] inactive_anon 0 [ 189.269548][T12002] active_anon 0 [ 189.273012][T12002] inactive_file 0 [ 189.276698][T12002] active_file 0 [ 189.280184][T12002] unevictable 0 [ 189.283635][T12002] hierarchical_memory_limit 314572800 [ 189.289015][T12002] hierarchical_memsw_limit 9223372036854771712 [ 189.295182][T12002] total_cache 0 [ 189.298635][T12002] total_rss 0 [ 189.301970][T12002] total_shmem 0 [ 189.305417][T12002] total_mapped_file 0 [ 189.309383][T12002] total_dirty 0 [ 189.312847][T12002] total_writeback 0 [ 189.316726][T12002] total_workingset_refault_anon 2276 [ 189.322012][T12002] total_workingset_refault_file 975 [ 189.327270][T12002] total_swap 479232 [ 189.331090][T12002] total_swapcached 0 [ 189.334986][T12002] total_pgpgin 232232 [ 189.338961][T12002] total_pgpgout 232232 [ 189.343054][T12002] total_pgfault 212679 [ 189.347119][T12002] total_pgmajfault 353 [ 189.351194][T12002] total_inactive_anon 0 [ 189.355340][T12002] total_active_anon 0 [ 189.359361][T12002] total_inactive_file 0 [ 189.363517][T12002] total_active_file 0 [ 189.367491][T12002] total_unevictable 0 [ 189.371485][T12002] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.3182,pid=11998,uid=0 [ 189.386260][T12002] Memory cgroup out of memory: Killed process 11998 (syz.0.3182) total-vm:93956kB, anon-rss:1136kB, file-rss:22568kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 189.404366][ T5020] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 189.558037][T12050] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3200'. [ 189.591960][T12050] team0 (unregistering): Port device team_slave_0 removed [ 189.621946][T12050] team0 (unregistering): Port device team_slave_1 removed [ 189.853227][T12075] loop1: detected capacity change from 0 to 128 [ 189.880829][T12002] syz.0.3182 (12002) used greatest stack depth: 7240 bytes left [ 189.890296][T12075] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 189.905874][T12075] ext4 filesystem being mounted at /660/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 189.943284][T12079] bond0: (slave dummy0): Releasing backup interface [ 189.970377][T12079] bridge0: port 1(batadv0) entered disabled state [ 189.992473][T12079] net_ratelimit: 10 callbacks suppressed [ 189.992492][T12079] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 190.020156][T12075] loop1: detected capacity change from 128 to 0 [ 190.040861][ C0] I/O error, dev loop1, sector 38 op 0x0:(READ) flags 0x3000 phys_seg 1 prio class 2 [ 190.050581][T12088] EXT4-fs error (device loop1): ext4_read_inode_bitmap:203: comm syz.1.3219: Cannot read inode bitmap - block_group = 0, inode_bitmap = 19 [ 190.074124][T12088] Buffer I/O error on dev loop1, logical block 1, lost sync page write [ 190.082882][T12088] EXT4-fs (loop1): I/O error while writing superblock [ 190.100465][T12075] EXT4-fs warning (device loop1): htree_dirblock_to_tree:1051: inode #2: lblock 0: comm syz.1.3219: error -5 reading directory block [ 190.121164][T12075] EXT4-fs error (device loop1): ext4_get_inode_loc:4970: inode #2: block 35: comm syz.1.3219: unable to read itable block [ 190.134278][T12075] Buffer I/O error on dev loop1, logical block 1, lost sync page write [ 190.142869][T12075] EXT4-fs (loop1): I/O error while writing superblock [ 190.149709][T12075] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6313: IO failure [ 190.180214][T12075] Buffer I/O error on dev loop1, logical block 1, lost sync page write [ 190.188859][T12075] EXT4-fs (loop1): I/O error while writing superblock [ 190.195725][T12075] EXT4-fs error (device loop1): ext4_dirty_inode:6517: inode #2: comm syz.1.3219: mark_inode_dirty error [ 190.207457][T12075] Buffer I/O error on dev loop1, logical block 1, lost sync page write [ 190.216047][T12075] EXT4-fs (loop1): I/O error while writing superblock [ 190.254741][T12102] netlink: 'syz.5.3221': attribute type 21 has an invalid length. [ 190.262988][T12102] netlink: 'syz.5.3221': attribute type 1 has an invalid length. [ 190.270818][T12102] netlink: 132 bytes leftover after parsing attributes in process `syz.5.3221'. [ 190.325085][ T3314] EXT4-fs warning (device loop1): htree_dirblock_to_tree:1051: inode #2: lblock 0: comm syz-executor: error -5 reading directory block [ 190.392250][ T3789] EXT4-fs error (device loop1): __ext4_get_inode_loc_noinmem:4955: inode #12: block 36: comm kworker/u8:29: unable to read itable block [ 190.414629][ T3789] Buffer I/O error on dev loop1, logical block 1, lost sync page write [ 190.425883][ T3789] EXT4-fs (loop1): I/O error while writing superblock [ 190.432947][ T3789] EXT4-fs error (device loop1): __ext4_get_inode_loc_noinmem:4955: inode #2: block 35: comm kworker/u8:29: unable to read itable block [ 190.448971][ T3789] Buffer I/O error on dev loop1, logical block 1, lost sync page write [ 190.457488][ T3789] EXT4-fs (loop1): I/O error while writing superblock [ 190.470732][ T3314] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 190.479974][T12120] loop5: detected capacity change from 0 to 512 [ 190.486660][T12120] EXT4-fs: Ignoring removed nomblk_io_submit option [ 190.493981][T12120] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 190.504602][ T3314] Buffer I/O error on dev loop1, logical block 1, lost sync page write [ 190.513952][ T3314] EXT4-fs (loop1): I/O error while writing superblock [ 190.521533][T12120] EXT4-fs (loop5): 1 truncate cleaned up [ 190.527606][T12120] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 190.556422][ T4852] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.594513][ T3819] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 190.633884][ T3819] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 190.681614][ T3819] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 190.765407][ T3819] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 190.806250][T12135] lo speed is unknown, defaulting to 1000 [ 191.071452][ T3819] bond1 (unregistering): (slave bridge3): Releasing backup interface [ 191.079862][ T3819] bridge3 (unregistering): left promiscuous mode [ 191.122270][ T3819] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 191.131244][ T3819] bond0 (unregistering): Released all slaves [ 191.140410][ T3819] bond1 (unregistering): Released all slaves [ 191.166048][T12179] __nla_validate_parse: 3 callbacks suppressed [ 191.166066][T12179] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.3252'. [ 191.196559][T12135] chnl_net:caif_netlink_parms(): no params data found [ 191.216247][ T3819] tipc: Disabling bearer [ 191.221560][ T3819] tipc: Left network mode [ 191.250335][ T3819] hsr_slave_0: left promiscuous mode [ 191.363579][T12135] bridge0: port 1(bridge_slave_0) entered blocking state [ 191.370760][T12135] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.384376][T12135] bridge_slave_0: entered allmulticast mode [ 191.391179][T12135] bridge_slave_0: entered promiscuous mode [ 191.398373][T12135] bridge0: port 2(bridge_slave_1) entered blocking state [ 191.405490][T12135] bridge0: port 2(bridge_slave_1) entered disabled state [ 191.412823][T12135] bridge_slave_1: entered allmulticast mode [ 191.419642][T12135] bridge_slave_1: entered promiscuous mode [ 191.442589][T12135] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 191.461614][T12135] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 191.513170][ T3819] IPVS: stop unused estimator thread 0... [ 191.520275][T12135] team0: Port device team_slave_0 added [ 191.563583][T12135] team0: Port device team_slave_1 added [ 191.591405][T12199] wireguard0: entered promiscuous mode [ 191.596926][T12199] wireguard0: entered allmulticast mode [ 191.646592][T12206] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3260'. [ 191.684916][T12135] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 191.691966][T12135] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 191.717901][T12135] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 191.767777][T12135] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 191.774862][T12135] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 191.800899][T12135] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 191.868428][T12135] hsr_slave_0: entered promiscuous mode [ 191.880706][T12135] hsr_slave_1: entered promiscuous mode [ 192.039026][T12135] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 192.071167][T12135] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 192.095196][T12135] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 192.112106][T12135] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 192.211742][T12135] 8021q: adding VLAN 0 to HW filter on device bond0 [ 192.237953][T12135] 8021q: adding VLAN 0 to HW filter on device team0 [ 192.268408][ T3819] bridge0: port 1(bridge_slave_0) entered blocking state [ 192.275550][ T3819] bridge0: port 1(bridge_slave_0) entered forwarding state [ 192.293542][ T3819] bridge0: port 2(bridge_slave_1) entered blocking state [ 192.300642][ T3819] bridge0: port 2(bridge_slave_1) entered forwarding state [ 192.438342][T12135] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 192.635056][T12276] loop2: detected capacity change from 0 to 1024 [ 192.647399][T12276] EXT4-fs: Ignoring removed orlov option [ 192.660279][T12135] veth0_vlan: entered promiscuous mode [ 192.671806][T12276] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 192.687879][T12135] veth1_vlan: entered promiscuous mode [ 192.747917][T12135] veth0_macvtap: entered promiscuous mode [ 192.756901][T12135] veth1_macvtap: entered promiscuous mode [ 192.773128][T12135] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 192.784939][T12135] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 192.796445][ T3771] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.822321][ T3771] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.833002][ T3807] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.845934][ T3807] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.294926][ T5020] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.528923][T12328] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12328 comm=syz.2.3303 [ 194.052805][ T29] kauditd_printk_skb: 150 callbacks suppressed [ 194.052823][ T29] audit: type=1326 audit(1761932613.360:15881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12350 comm="syz.5.3310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00be17efc9 code=0x7ffc0000 [ 194.115725][ T29] audit: type=1326 audit(1761932613.360:15882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12350 comm="syz.5.3310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f00be17efc9 code=0x7ffc0000 [ 194.161680][ T29] audit: type=1326 audit(1761932613.420:15883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12350 comm="syz.5.3310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00be17efc9 code=0x7ffc0000 [ 194.185437][ T29] audit: type=1326 audit(1761932613.420:15884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12350 comm="syz.5.3310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00be17efc9 code=0x7ffc0000 [ 194.185683][T12355] loop6: detected capacity change from 0 to 1024 [ 194.221670][ T29] audit: type=1326 audit(1761932613.520:15885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12350 comm="syz.5.3310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f00be17efc9 code=0x7ffc0000 [ 194.245400][ T29] audit: type=1326 audit(1761932613.520:15886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12350 comm="syz.5.3310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00be17efc9 code=0x7ffc0000 [ 194.269049][ T29] audit: type=1326 audit(1761932613.520:15887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12350 comm="syz.5.3310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00be17efc9 code=0x7ffc0000 [ 194.278731][T12355] EXT4-fs: Ignoring removed orlov option [ 194.292662][ T29] audit: type=1326 audit(1761932613.520:15888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12350 comm="syz.5.3310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f00be17efc9 code=0x7ffc0000 [ 194.321936][ T29] audit: type=1326 audit(1761932613.520:15889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12350 comm="syz.5.3310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00be17efc9 code=0x7ffc0000 [ 194.345585][ T29] audit: type=1326 audit(1761932613.520:15890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12350 comm="syz.5.3310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=166 compat=0 ip=0x7f00be17efc9 code=0x7ffc0000 [ 194.372825][T12355] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 194.672561][T12366] SELinux: failed to load policy [ 194.763706][T12377] bond0: (slave dummy0): Releasing backup interface [ 194.786628][T12377] bond0: (slave bond_slave_0): Releasing backup interface [ 194.806809][T12377] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 194.814411][T12377] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 194.834379][T12377] batadv1: left allmulticast mode [ 194.839452][T12377] batadv1: left promiscuous mode [ 194.844612][T12377] bridge0: port 1(batadv1) entered disabled state [ 194.857948][T12135] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.418361][T12420] netlink: 'syz.2.3340': attribute type 7 has an invalid length. [ 195.591612][T12436] lo speed is unknown, defaulting to 1000 [ 195.742316][T12441] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3346'. [ 196.009749][T12447] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 196.855095][T12505] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3375'. [ 196.936421][T12511] block device autoloading is deprecated and will be removed. [ 197.005161][T12519] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3380'. [ 197.014231][T12519] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3380'. [ 197.037781][T12519] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3380'. [ 197.046725][T12519] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3380'. [ 197.162704][T12532] lo speed is unknown, defaulting to 1000 [ 197.277494][T12537] SELinux: failed to load policy [ 197.361603][T12546] loop6: detected capacity change from 0 to 4096 [ 197.459835][T12546] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 197.511691][T12554] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3394'. [ 197.520619][T12554] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3394'. [ 197.530309][ T3771] netdevsim netdevsim5 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.559485][ T3771] netdevsim netdevsim5 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.579391][ T3771] netdevsim netdevsim5 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.608026][ T3771] netdevsim netdevsim5 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.643160][T12554] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3394'. [ 197.652205][T12554] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3394'. [ 197.666377][T12135] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.088261][T12572] loop2: detected capacity change from 0 to 1024 [ 198.099530][T12572] EXT4-fs (loop2): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 198.125378][T12572] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 198.172153][ T5020] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.276902][T12596] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3411'. [ 198.780174][T12626] loop2: detected capacity change from 0 to 8192 [ 198.928101][T12645] netlink: 'syz.3.3433': attribute type 13 has an invalid length. [ 199.044011][T12655] netlink: 'syz.0.3437': attribute type 1 has an invalid length. [ 199.061330][T12616] loop5: detected capacity change from 0 to 2048 [ 199.091742][T12655] bond1: entered promiscuous mode [ 199.100289][T12655] 8021q: adding VLAN 0 to HW filter on device bond1 [ 199.153978][T12655] bond1: (slave bridge2): making interface the new active one [ 199.161567][T12655] bridge2: entered promiscuous mode [ 199.168483][T12655] bond1: (slave bridge2): Enslaving as an active interface with an up link [ 199.170301][T12616] Alternate GPT is invalid, using primary GPT. [ 199.183770][T12616] loop5: p2 p3 p7 [ 200.043450][T12689] loop6: detected capacity change from 0 to 512 [ 200.055098][T12690] netlink: 'syz.2.3449': attribute type 1 has an invalid length. [ 200.081604][T12689] EXT4-fs warning (device loop6): ext4_enable_quotas:7180: Failed to enable quota tracking (type=0, err=-13, ino=3). Please run e2fsck to fix. [ 200.089364][T12690] bond4: entered promiscuous mode [ 200.101698][T12690] 8021q: adding VLAN 0 to HW filter on device bond4 [ 200.113566][T12689] EXT4-fs (loop6): mount failed [ 200.139184][T12690] bond4: (slave bridge2): making interface the new active one [ 200.146771][T12690] bridge2: entered promiscuous mode [ 200.188651][T12690] bond4: (slave bridge2): Enslaving as an active interface with an up link [ 200.405631][T12710] loop6: detected capacity change from 0 to 512 [ 200.450549][T12710] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 200.459029][T12710] EXT4-fs (loop6): orphan cleanup on readonly fs [ 200.475185][T12710] EXT4-fs error (device loop6): ext4_do_update_inode:5632: inode #16: comm syz.6.3456: corrupted inode contents [ 200.494212][T12710] EXT4-fs (loop6): Remounting filesystem read-only [ 200.500941][T12710] EXT4-fs (loop6): 1 truncate cleaned up [ 200.507653][ T3819] EXT4-fs (loop6): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 200.518226][ T3819] __quota_error: 107 callbacks suppressed [ 200.518238][ T3819] Quota error (device loop6): write_blk: dquota write failed [ 200.531429][ T3819] Quota error (device loop6): remove_free_dqentry: Can't write block (5) with free entries [ 200.541454][ T3819] EXT4-fs (loop6): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 200.552012][ T3819] Quota error (device loop6): write_blk: dquota write failed [ 200.559407][ T3819] Quota error (device loop6): free_dqentry: Can't move quota data block (5) to free list [ 200.661701][ T3819] EXT4-fs (loop6): Quota write (off=8, len=24) cancelled because transaction is not started [ 200.671926][ T3819] Quota error (device loop6): v2_write_file_info: Can't write info structure [ 200.685997][ T3819] Quota error (device loop6): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 200.710686][T12710] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 200.766163][T12135] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.113108][T12738] netlink: 'syz.5.3464': attribute type 1 has an invalid length. [ 201.134292][T12738] bond4: entered promiscuous mode [ 201.139579][T12738] 8021q: adding VLAN 0 to HW filter on device bond4 [ 201.209411][T12738] bond4: (slave bridge5): making interface the new active one [ 201.217057][T12738] bridge5: entered promiscuous mode [ 201.251503][T12738] bond4: (slave bridge5): Enslaving as an active interface with an up link [ 201.491971][T12745] loop5: detected capacity change from 0 to 1024 [ 201.518917][T12745] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 201.612367][T12745] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4193: comm syz.5.3468: Allocating blocks 449-513 which overlap fs metadata [ 201.637515][T12761] netlink: 'syz.6.3472': attribute type 16 has an invalid length. [ 201.686747][T12745] EXT4-fs (loop5): pa ffff888106dd7770: logic 48, phys. 177, len 21 [ 201.694829][T12745] EXT4-fs error (device loop5): ext4_mb_release_inode_pa:5444: group 0, free 0, pa_free 4 [ 201.724103][T12745] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.791938][T12793] loop2: detected capacity change from 0 to 8192 [ 202.856397][T12800] __nla_validate_parse: 2 callbacks suppressed [ 202.856414][T12800] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3490'. [ 202.872997][T12802] loop0: detected capacity change from 0 to 1024 [ 202.914969][T12802] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 203.291781][T12807] ================================================================== [ 203.299927][T12807] BUG: KCSAN: data-race in generic_buffers_fsync_noflush / writeback_single_inode [ 203.309185][T12807] [ 203.311532][T12807] write to 0xffff888119d40ea8 of 4 bytes by task 12802 on cpu 1: [ 203.319272][T12807] writeback_single_inode+0x150/0x3f0 [ 203.324690][T12807] sync_inode_metadata+0x5b/0x90 [ 203.329689][T12807] generic_buffers_fsync_noflush+0xd9/0x120 [ 203.335624][T12807] ext4_sync_file+0x1ab/0x690 [ 203.340335][T12807] vfs_fsync_range+0x10d/0x130 [ 203.345127][T12807] ext4_buffered_write_iter+0x34f/0x3c0 [ 203.350716][T12807] ext4_file_write_iter+0x387/0xf60 [ 203.355962][T12807] iter_file_splice_write+0x666/0xa60 [ 203.361356][T12807] direct_splice_actor+0x156/0x2a0 [ 203.366513][T12807] splice_direct_to_actor+0x312/0x680 [ 203.371928][T12807] do_splice_direct+0xda/0x150 [ 203.376726][T12807] do_sendfile+0x380/0x650 [ 203.381216][T12807] __x64_sys_sendfile64+0x105/0x150 [ 203.386456][T12807] x64_sys_call+0x2bb4/0x3000 [ 203.391149][T12807] do_syscall_64+0xd2/0x200 [ 203.395663][T12807] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.401564][T12807] [ 203.403895][T12807] read to 0xffff888119d40ea8 of 4 bytes by task 12807 on cpu 0: [ 203.411530][T12807] generic_buffers_fsync_noflush+0x80/0x120 [ 203.417434][T12807] ext4_sync_file+0x1ab/0x690 [ 203.422126][T12807] vfs_fsync_range+0x10d/0x130 [ 203.426907][T12807] ext4_buffered_write_iter+0x34f/0x3c0 [ 203.432460][T12807] ext4_file_write_iter+0x387/0xf60 [ 203.437665][T12807] iter_file_splice_write+0x666/0xa60 [ 203.443069][T12807] direct_splice_actor+0x156/0x2a0 [ 203.448193][T12807] splice_direct_to_actor+0x312/0x680 [ 203.453575][T12807] do_splice_direct+0xda/0x150 [ 203.458349][T12807] do_sendfile+0x380/0x650 [ 203.462802][T12807] __x64_sys_sendfile64+0x105/0x150 [ 203.468020][T12807] x64_sys_call+0x2bb4/0x3000 [ 203.472734][T12807] do_syscall_64+0xd2/0x200 [ 203.477239][T12807] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.483139][T12807] [ 203.485463][T12807] value changed: 0x00000070 -> 0x00000002 [ 203.491184][T12807] [ 203.493515][T12807] Reported by Kernel Concurrency Sanitizer on: [ 203.499666][T12807] CPU: 0 UID: 0 PID: 12807 Comm: syz.0.3488 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 203.511047][T12807] Tainted: [W]=WARN [ 203.514851][T12807] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 203.524909][T12807] ================================================================== [ 204.013795][ T3321] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 204.099857][T12771] loop6: detected capacity change from 0 to 2048 [ 204.152677][T12771] Alternate GPT is invalid, using primary GPT. [ 204.159036][T12771] loop6: p2 p3 p7